last executing test programs: 13.619144216s ago: executing program 1 (id=3285): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(r0, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) listen(r1, 0x50) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x8f}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0xae2f}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2}]}}}]}, 0x5c}}, 0x0) listen(r2, 0x50) close(0x4) 13.416894086s ago: executing program 1 (id=3288): r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000001840)="ea6363abea2244e92d395334e3986df9aa3320d83288c586c97c9ab0d2504cc7d4a087ba2206ee8c104a986c9c7df881f726546f9d3017fdca2aa5e7ce0b95082e7457") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x2, 0x5}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000001940)={@dev={0xfe, 0x80, '\x00', 0x27}, 0x6, 0x2, 0x1, 0x5, 0xfffd, 0x9}, 0x20) unshare(0x400) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="17004000000000000000000000000000000000006fd38eedee9b75db03770a1ddbf170fda0960fe64cfcc36ea57bf3e93b049318a4a9d42e0ed8", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x3, &(0x7f0000000140)={r3, 0x0, 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000001900)=ANY=[@ANYBLOB="050000000000000073113600000000008510000002000000850000007600000095000810000000009500a50500000000", @ANYRES8=r0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r7, 0x114, 0x5, &(0x7f0000000000), 0x4) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r7, @ANYRES64=r8, @ANYRESOCT=r4], 0xa8}}, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000240)="b6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='nv', 0x2) r9 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r9, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000000)="974701000000201c2401e18d93d74c6f68bb1a761a4a946249c9a834", 0x1c}], 0x1, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010101}}}], 0x20}, 0x4048804) r10 = socket(0x23, 0x5, 0x0) getsockopt$sock_buf(r10, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) shutdown(r5, 0x1) recvmsg$can_raw(r0, &(0x7f0000001800)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001700)=[{&(0x7f00000000c0)=""/96, 0x60}, {&(0x7f0000000340)=""/4090, 0xffa}, {&(0x7f0000001340)=""/220, 0xdc}, {&(0x7f0000001440)=""/251, 0xfb}, {&(0x7f0000001540)=""/177, 0xb1}, {&(0x7f0000001600)=""/243, 0xf3}], 0x6, &(0x7f0000001780)=""/88, 0x58}, 0x20) socket$packet(0x11, 0x3, 0x300) 13.143016805s ago: executing program 1 (id=3291): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) (async) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0x3, 0xffff}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xffff}}}]}, 0x38}}, 0x4000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20004800}, 0x24004054) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000611234000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 12.876342283s ago: executing program 1 (id=3296): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1100000004000000040000000900000000000000ef4f16d33ac50f5aba54452881289ac61ba56b5dac33b443c5fe9a8a8c6feae3cbb054c9acfa8727120e40468ea410756a5e4c5b9fe7e4d689eecc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0), 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0xffffffffffffffff, 0x101}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000370400000000efffffff00000000", @ANYRES32=r9, @ANYBLOB="8704050044800000240012800b000100677265746170000014000280060010004e21000008000700ac"], 0x44}}, 0x20008884) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r11 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x5, 0x32, 0xffffffffffffffff, 0x0) connect$l2tp6(r11, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x6, 0x14, {{0x8, 0x4, 0x0, 0x7, 0x20, 0x68, 0x0, 0x2d, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@end, @generic={0x82, 0x5, "988fbf"}, @ra={0x94, 0x4}, @noop]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x114, r5, 0x300, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x8004}, 0x4000080) 1.839130437s ago: executing program 0 (id=3403): getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1.715178514s ago: executing program 0 (id=3406): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010027bd7000ffdbdf25030000000c0005002001000000000000340007800c000180", @ANYRES32, @ANYBLOB="00010000e4ffffff", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYRES8=r2, @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="080001"], 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r4, 0x0, 0x2, &(0x7f0000000380)='\a', 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000000), &(0x7f0000000080)=0x14) socket$kcm(0x29, 0x7, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000056000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="100001"], 0x28}}, 0x0) 1.500248233s ago: executing program 0 (id=3409): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f00000000c0)) (async) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r5, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e80)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x4, [@enum={0x7, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x526}, {0x4, 0x8001}]}, @typedef={0x8, 0x0, 0x0, 0x8, 0x3}, @restrict={0x4, 0x0, 0x0, 0xb, 0x3}, @enum={0xa, 0x2, 0x0, 0x6, 0x4, [{0x9, 0x8}, {}]}]}, {0x0, [0x2e, 0x0]}}, &(0x7f0000000e80)=""/4096, 0x6c, 0x1000, 0x1, 0x4844, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001ec0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, r14, 0x5, 0x2, 0x5}, 0x50) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000140)=0x4) (async) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000140)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xf3ff}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xf3ff}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 1.225236711s ago: executing program 3 (id=3413): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000240)="fb90c853a7271f692de35b1630188b322d5bc6c89c03ff08385bd84e6b2dd423d3693a40998e39635cc868506d0ea84bdaf452132052d82b3617b34ab39363bd715c73cc792459f278c104c6d3b5cd31e56f902a5aa3f1d62e44ebb2a9fac42322544d5d706f4e59dc278eb749b92c8f43b8514ec1d85d3d85938a0a3f0dd51226594c6fac785781462482ff740ef85586d9fce3c0d192446ae8c88eee61229446450c7df7a9253c7be6be908ed49f2594993e5220537786640a0cb02c1de74056d6b7360ed682bfc84c31c863f38decbcf3567816bf63758878b4788126a5d639f9f31574fcc78c56fe774062f687f052", 0xf1}], 0x1, 0x1) close(r2) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) accept4$alg(r2, 0x0, 0x0, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000000580)=0xe8) sendmsg$nl_route(r2, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)=@ipv6_delrule={0xd0, 0x21, 0x100, 0x70bd2d, 0x25dfdbfb, {0xa, 0x14, 0x80, 0xff, 0xa2, 0x0, 0x0, 0x5, 0x10015}, [@FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x24}}, @FRA_SRC={0x14, 0x2, @remote}, @FRA_SRC={0x14, 0x2, @remote}, @FRA_SRC={0x14, 0x2, @empty}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r3, r4}}, @FRA_DST={0x14, 0x1, @mcast2}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0xdf2}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @empty}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x70bd2a, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x4}]}}}]}, 0x44}}, 0x0) 1.18400078s ago: executing program 3 (id=3414): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r3], 0x7c}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x5, 0x0, 0x2, "0a08cf30c194"}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000007200000005000000bf09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207b9af8ff000000004c9100000000000037010000f8ffffffb702000008000000b7030000ffffffff15000000060000005f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000007200000005000000bf09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207b9af8ff000000004c9100000000000037010000f8ffffffb702000008000000b7030000ffffffff15000000060000005f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000037c00000400c2800c0001800600060086dd"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.036197836s ago: executing program 4 (id=3415): getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 977.917649ms ago: executing program 2 (id=3416): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25a60200475400f6a13bb1000000080080f34803", 0x10000, 0x0, &(0x7f0000000140), 0x14) 954.035056ms ago: executing program 4 (id=3417): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140005030000000000000000000000000086a7268bc9f63f857faad9d0ca3262f9521b"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x48010) 952.079342ms ago: executing program 2 (id=3418): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x9}, {0xffff}, {0x7, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2001c061}, 0x8000) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4000054) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYRES8=r0, @ANYRESDEC=r1], 0x6c}}, 0x4c045) 789.281825ms ago: executing program 4 (id=3419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, 0x0, 0xb, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x45804) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async) r2 = socket$rds(0x15, 0x5, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000050009"], 0x184}}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000004600090004000000fddbdf2502000000f6256868df8872e0e9280276869197992e35e297857303fe6b2d9e8d98d72e7c1dabee39f130c7b3b75cb6cb45bb5fc387ed0247ab20621d53c0b54d422d1130e8bd39d16508b73ffb375ae6114523812a9cc70d7e7df3d53b4a3a18c98919e9c878b7d1e27783a2e88f606f9b6d53a8fd214d5bf538b1944ed2f7"], 0x14}}, 0x0) (async) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000000), 0x4) 713.993128ms ago: executing program 4 (id=3420): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000f400000000000000f462013c000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f00000000c0)={'full', 0x20, 0x6, 0x20, 0xe10}, 0x2f) 655.349316ms ago: executing program 3 (id=3421): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000002c0), 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000180)=0x1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff2, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2000c083}, 0x20000050) 642.012268ms ago: executing program 4 (id=3422): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.memory_pressure\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) (async) socket(0x23, 0xa, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r5 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r9], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r6, @ANYBLOB="200001"], 0x38}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async, rerun: 64) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x1d, 0x5, 0x470, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x8000000, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) (async) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010014000000000000000200e70308000300", @ANYRES32=r11, @ANYBLOB="0c00990000000000000000000800a0002616000008009f0005000000080026000816"], 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000002280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002240)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d0150000", @ANYRES16=r2, @ANYBLOB="02002da77000fddbdf258900010008000300", @ANYRES32=r11, @ANYBLOB="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"], 0x15d0}, 0x1, 0x0, 0x0, 0x48000}, 0x4000004) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 32) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES64=r13, @ANYBLOB="93b5bbc0862ad06dd37097f27ed0fadebe422299e4bb7b26f0339c6b617263c49e26725add75673fb1f3d5e2f6c59102013d1df24a8ca51800712f5805a880067747de6358946190565c69ff9fe969f58920c654f86bc6d354f32be24302fb1508af267d98e8a3a3f491012d68fb87553cfd46cb9e2afa9d9be2e1bec9d28878c43c4c0ce4200aaa177043ae70d2c2c6b2d39ac68d10acd9926f5371ed9c124a2ca9c287929e5b97213bc6", @ANYRESHEX, @ANYRES32=r9, @ANYRESHEX, @ANYRES8=r3], 0xac}, 0x1, 0x2}, 0x0) (async, rerun: 32) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x28, 0xa, 0x7, &(0x7f00000002c0)) (async) sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r14, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a300000001b0a010800000000000000000a0000000900010073797a30000000000c000240000000000000000104000480140000001100010000000000000000000000000af0044db28c715a4bae05476db0fe73ce3c5074eaedefb735b6c7c7aedcfd8f73fff8582d5cba766259e6f424d270d57ab008f83040dd532439ca3de881cea1a0ba8d1803cf31cdd5441e7cc9326b9703bc2d8a8fe9f2871402159d33b6a08d83440112ead1fd1d8633cb1014202a652a6b23363c0cb7b372e296aad9d6c85d453e7c08637310bb3139aae94bf0f43d02fdbb410eb0e727ea394930ffbe0ed7840e79765e8203178e03bb1c52d996c8cbf3f52e74b9ef198e579e1b288051b534b187b41b00c5b716bdd060bd277b0d77628fffc15ddbe22c5e0d9fcdc0"], 0x58}}, 0x0) 541.852575ms ago: executing program 0 (id=3423): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) recvmmsg(r0, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f00000003c0)=""/112, 0x70}, {&(0x7f00000005c0)=""/135, 0x87}, {&(0x7f00000025c0)=""/4108, 0x100c}, {&(0x7f0000000480)=""/255, 0xff}, {&(0x7f00000002c0)=""/208, 0xd0}, {&(0x7f0000000880)=""/247, 0xf7}, {&(0x7f0000000780)=""/209, 0xd1}, {&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000000e00)=""/113, 0x71}, {&(0x7f00000000c0)=""/34, 0x22}], 0xb}, 0x803}], 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRES32], 0x20) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000036005d082bfd700403dcdf2504000000080004"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000080) 541.471957ms ago: executing program 2 (id=3424): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), 0x0, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4881) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f00000003c0)={0x80, [0x8, 0xc]}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) sendmsg$NFT_BATCH(r8, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, 0x0, 0x0) 430.85126ms ago: executing program 4 (id=3425): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0xdc, 0x5a, 0x200, 0x0, 0x25dfdbff, {}, [@generic="d5d34f0084f8e677361e8c2be0112a2d93545076f7218781135ba693d658829a3e0828d9431e5a44bad2f6adca3aa3b8d9453563a5153811fffb76a1e24e63d25d6da92556f98a6d39a22dad7226bf141b9c1870f06c23f06e1ffb4cb1887e898206599e09cd90f223db45682edc4ba694563682f0ce47b06a27ef41d6f7dbb282fc9fc4878865c37d3368ce30d827397bb6c3c99a653598e76cc1b73e393877933235b67cbc98a841eeb1e7e5b5e4d60c36b6b6c4dbb0d9b344c6910c2668ca4b1683ce9739180c"]}, 0xdc}}, 0x0) 415.382921ms ago: executing program 1 (id=3301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4100}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, r1, 0x804, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0020380004804e2d3009"], 0x4c}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0xc4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x29, 0x7, 0x1, 0x0, "fd50d4bb3593aa42c3565272c9963ede12988a3bc43161c7cab0e3c6bb6b7aef71860e5ddd"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6005}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6000}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0xec}}, 0x0) 412.274327ms ago: executing program 2 (id=3426): getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 404.079386ms ago: executing program 3 (id=3427): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25a60200475400f6a13bb1000000080080f34803", 0x10000, 0x0, &(0x7f0000000140), 0x14) 340.813175ms ago: executing program 0 (id=3428): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec000000210001000000000000000000000000000000000000000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000080000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbfe88000000000000000000000000000120010000000000000000000000000000000040000000000000000a0000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ac1414000000000000000000000000000000000000000000fc"], 0xec}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x100059, @private0, 0x6}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x7d, &(0x7f00000000c0)=@assoc_value={r5}, 0x8) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000280)) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f00000001c0)={@dev={0xac, 0x14, 0x14, 0x19}, @multicast1, 0x1, "56b30fef52f748c5e954efcb789f83e1d52b2e7669ea1a8a0f0397f7c7458151", 0xe6b, 0x7, 0x2}, 0x3c) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) sendmmsg$sock(r1, &(0x7f0000004c80)=[{{&(0x7f0000000540)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x7fffffff, @local, 0x7}}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000cc0)="9633cefcbd2d13dfb2f6ff4c210ff4bc41cb0b60696422d82fde485a7feb9087bc8467cd2dbacab25f32e93c1a4d98fce0d624b0ecdf8e547c450c3d6b6d25c3711367d771321ce3412565b68e2b2d3cdb6dd146b3a858c3ffa6058e2b6df6d1367d4bb37f55b0b4b1970bcdedde39e3c0a62683c0e3ccac202025f1a757e35bb8235f71ff4dc294780e8894d684b37ba7641b49c97d076a952787ed9ac038c9366803807e4052813873a016ca13e8666dc238cae1add83658c2dc6374a9caec94cbc782e26f1bcf5d4d4efed1271489410be3e1e4a231b2c6f10440595007b998dbbee8c1958e797bb32836e6c7817ba4032bad2f35b54f0cea89e12da59d0d6dfdd0b169a95221b86f7a1b77dee87d6a5e78504ea37b224806b7947fb2e11d6db211e0c638a0994721cde612c30d60ec84112356a5a9fbaea21094fb45ddf8ea5376b6af132773c770a01785f757195872c675892c582b83c1b10a3ae7edd2e371eb7a87d769a29d47205fbd1fa8141008c57c048605137135d9a075e9aaebd4d3051287c670f668455fab4d17e6ac3805b64a32d0519ce85b5fc54bd9d281830ec17d3b0e7137892de7e2479c5d41d2d91a1e384392dba769de75890d9607a8d39c1ead2f0ce9665ac2586e7a9b69d3a030cd1d9f155e6e455aeb6aca9a4863d12cc1faf5e301c79df27bdc3193c863fdbcc9678d180795b704661ad3a6b5b2ea29d0ae0d61958bcb02971c44437320363d1c0f5c74e9be54cafaf0bf0fb3dc5e044fc09a93f46a30676c83d7244e906acaf680831d7d190ed331844d2ed4f274b5f12596c3428d460accdd19e7632a19db4bdda2552e03c95d70fc6a6aed4d276e84a39d0b0b21820ed21a2ea32f9eefd154dea9b09981e5a19f4a4ea6659878d6f336cf3964455b72f3ed0de58bc2f883f1f2151aec3b7483ca1872db58bf9fdc277d4eb392c24e11edf07915adef5455752593d270dd8ebb134f3e6d94be1e8c9973e9f84473b337cb53c3f057adce575d017adc2c098c4b6aaf52d5548d33112f1bdf338d6cf7da30701e4642ad7e1bf63f026078294f8a8c3b15fbca30667d3b09b90e507b36cdcf7902391378eab40b7d8644ba58682f7741e630d73ee7b91f8b2a2cd1360c539b22044951bfc040e9f2f14c5ae56f70c1bd8a90bd2a4f538c8b0ffc99304145b9f905c8d2d81d22e526dae6cf2c162738717b265461facb45f42fc40e9d7de5d54fe5e8d44bc678bd281ebf5411d9168e85fb4c11e1afd0978d7e43f8bb4fcbb46257af93e9aa9b2c99e0cae80756f06d39ca06d0de39af33051a89e25ddc8c08c2708c34cb86156654d57a365373584bd5de4bf91edacfdc4c8f366fb8feed7932f8537e9d849a902078fc697a4c53acb5fdafc42ab2e0de23727044726937998296fe0d59437d43ff6c7c1ce8cbbc2609429fc9506ffc5604b139e9a51032d2289956cda44a85b67f9c95b6ba59ab57dd0f0ae1e71509623a8970aa141bc09ef1dd4f04786fb5d7bfa0889a1791f8bd66bc4dac23ec823aded5f314f7d7ea4df35152f4bae619ba19a417925135a8608d9fbb7bbc01edd0f3886f719b2fae437cb5ee468b9e17daa2681982636878d5945e99c43350163857bc12298579469a66aa4adc7caca5511babfc5d068e814f01902ca1089f9bc0c35c22582e1222ce86202e30eab9848dd65a488cacbb4c88732c5eda5b3a0bb80360e09bb86246737a780eeae8f02fae86fd29b7545a9d38c7d95debf77377d15f5add42c5ec4041b99b8871bdaea4d3f43e5facb9f533500b5eefbead366bfa92b3ff3e6afab9ad9f1ef08e1ea5e422ead621177760248211962d14eb31e4f89f77e00869f125fe1ace67b8b03e720bdc17b67937608670f0c731dd37899fd1b7f32ef491f1c169dcacfefb2b3ee2c13d3f4d1c6382642662ee1c825b3822227327f592c81f052162c6b33366710c6b573743c8d9caa6f029ad8d2d2e44bea304cf3a508fb6039adaddb059857339082aa316f898f53b0324f768742ccf38316117452d9f4c477a55ca6304be2a85c29ba92c4f6f564a9449ad748f2bb5ff78bd9a68e60991909c6e5b01aaa0d3f733d7c2b5f175cff1cc6fc68af099b987bd2dc9f5e406200e0090766d4796929f11b12a42e498b559790cbf6b67aa6de1a9ed7d21bc8845fef6c09892ba45c39cbfcf0ce953b2c3468e8ceb170f69ee8231b22046da1565da577a6414cb9986c104719ce15a55bd9edafcca93926b911c967d4d5b29e36ef90807eed58a20b4cd9f3e330f17c04e18cbac7b764f6a2794e6727628f32d96558cc0b8bcc0cde0eea1be08ddb0ec7376e2316da89a4970d447f5c7e258e39a6898cd79b1059de31b7d448d6951e187746a57288ad34507ae18dd1db70ed083432e5577eb225b458952d678aa966247acd51a10462006acfb784b0a1bc77e1e9ac64938f3ff2d438fa1e0d61ccb4e816724fa072034fab60c4eefe9eb3a6bbb695777b9a3069c3f0aa3682927fc72876f1090bc1875e73153626dd48371f6bb84df9a3af055202efab7043609cd77d5ce71231e72edf5507c9f1fb0a8a2b5f837c1079ad500ff989c082edbd89a34b39da131d8500c3e1157215e4edea64796fe5775853b5040106410d5ddf9141e16be0566f6ad83c18caf60523d727a127afcb7ea9c0a95f54f4a7fbd948d9f5351186623eecda7f1b1d88e199f1147a2117291b0992558d8bb7bb15fab4119b8690a595fff57e88f3cb4d2707382fb43a3f050165624b61227c9eb572b3a1b9134aaa51d71fa475a7d68fd7acb0b72b567690f9bcd44ad91131752af8ed2f592250ec474d6662244ece694701b26ab82521b4202ab60a5a734bf36f106e1842fa6bf8e4edf2ed0d5d5716bbaad56c648ba02c4daf3c1d6a06cf3ee0c9a23f2c8414fcd8d0fca1b0b1fa7b7526d1c125f08713ccd24c912c1ec845361d4a21d71a6c5a688918a6fba8755c9d124bfdfba43b32d189e1fe69ede22084ca133775ca0100b17e1ece6bd22ba528ef699825a1c0d7f9df9b1f2465d4c7e6c3b90253d580988a302ab73837781fc9f036fa3052da993cb38b9662db3b64a2afafa660540eb6e5b442b91e9f552f9febad52487b2721147358a789d5ddbf206808a424a5c6f9ccc8da58edea70e3c617f1e67b1e6c16a5dd932c727491f2606587cf7e62c4a9a7c44688d1d655a0c1a92e6b68ffbbddc3e25dc03055f692a21da6d0832f6bc726b8d7ea5ac564c9c54a915b20872d514053a0189155f2747e46544b90df48f1cd52014c7839be43ef92762a21062079806810ff75f9bc1888d6e396b94c72c6c43ed59c3c9cd3a743d4d0f0dd9dbfe3c602b9826aec52abef2f82032672a5344ea30140717f24190dcd0122a32e080aa4507370d15b8dabe8897c41157288e309d0fe6a643c3fc6c2f14de461d751a10237803ab0c1f7fafd7789ea357a2cfda6b1b44f87785d5159809a141fc039860f497946ca14e0627d6f8cff33b46b8d908f5b84b044cbd2e2f78fa9cbd46145939d7229bde2826cbd1ef1f72b9ca4de4592b81247900d838c6179f1e0858bdfb33a29c41499816bab85cab9f1f99541ddb950e6b40b932da9da3d6b1ac2346d3c98f4390cd7541a4c88ec5a6e6b218f286ff815c067d5ca113efd7f92176032bea19cda5da9aed94cdcc1cf4c71f267c6f6ca353e4452f32a3b419bbbdb00a2f17a49201f788032c7b1fd23eb398694c1b8efb6dfc2030e56c49bf68ec69ef2d38ab07b4730be14d2a00c2da6b81ae0db90f23422dbc6f2c2ba4aa2419c9645b546622a793c7175e40d1324fece31ba2a2ade8bd3262e851d4975759e60ad0e8788b02e3d69a8d21b6cc81fee20d0faf42e17d528f5ba0941e707a291048c555d2bae7ffa850cb2969c09e38f5c6cfb75be54ba5125f24c6cf409325a0625d191d1291afd72f4a0333c07ea45ef4c7193f5f3386379b9215748d80335192ab9c53660dabc81bac385a28e6210d1bc013606e1e2137dbb2a324e6f6778da71d76cbb8c7a8a525a463f98fe7be266b11806f52a7eb0b35a70826b383abef85fc64a14b70a8b34e70500c11bd4cb17a2376bc964a3f57442557d590d1dab189ac6e871d1711cd2367154ab002cc5d7c86c44e4c738a4f584ada758da2d33d731ab48ec80782ddee45fd9b64103fec4635a848ae2aec74cd3c54ab50de0b2beb1f7ccd3ad496825d20db49f4c9be83394fba198c921ad6172a6af2c9f6b3df63b754b779ee930a6a1a282ce381d2519e796365b9612ac2a5bcfa3e4706bcad0fd7f2305f9057c5910ffc3e6ee3eac76f3dc934610a0934ad44e30cd4027ba8f655bbb0d4cbd5d43dc3680d4481bc79096bb3910bb111f88549dcb155c5a3672174faea8209fc495ea783924458b041da8c76a14ddd40a97e5e6a7b98aeef16e36745220c93f08322ef5f64d252a34544a3d8fab0b6b062e5280ef4e3c26970f84dec05002617b598e9ede69b36b88dca7b336e08791e8f2ac47b0422aa234360a770de1cf24e253ded17a791816af364ef8920311becc80c20e9b2b420cdeff7754d4cdbaf227578f9b7747d8f92a394373b0bc9a8d0b6b3428c25085db6287367886620400626b765556ab4a461358d707164dbbb1b507a9746cdd7089b9bb6facdca8860f4f2da03fdcb7097f39fc9b179a0181cc3b9aee2e39395c7caf59758b6543745e1a3c2cffaaf8dd2e588b7a6979d2d265a3075d2e1d8876e91053e5f3d6e780b5962c3afb39c4f8dba6937d8d0df35281c5b6e2477c32669f8129ff3a98932fdb46ff381912bf93d0de4defca6a45693cb8c153764ede506a435f0e0f73e075c7fcc0e1e8336da04cf84300bae5b23215ef3673b0dd4dc12c35fab4047eb35b11f44348dbd0bece0d08f55e117c28507fd84cc4514cb2a3d71f0f0c991d591dacf3a385d2dfa6f01d148126d32e3971a07679ad0cf474558401b5003be5822db75f41ec88c3c28d5ba32ae37b6d4daab905e7092dae20d88e1d54f41ff396c5e990a957732aadd16f4e1d15e437cf474d5c12e2eae4daa7bc3debf457fb474af9e20d98a2cd75d544b0444527142e7511bf8ce2cc1c3a641b248400c5e108bc131c54a9dfec55a5ac0307ea2c5f6cfa3cefe1ebdedfba30b3bc94129092f708cedad6a6a62e5a71031685068280a943c3162b3d68d652e75e504399aac7b702b67084f7e44a96fa280ada0a47103ef19540516ebd0d8fb7d6cf0f92af53164206bbc9aeace512c8c549eec22e195c8755a9da29f0856b9dbf7b3f69a032456768b1f742caae61ecd83b594c8c3418c413cb562475110bcd871c996fe72320aafcf9f5088b76a7efee60a978372c7d2416ba0b89acdafe64c191ada1e16d2c728d0cd4b883a6c64777c45c4d96231555926a52b7e29e7caab06eb571fab1e2b17e94ebbe5a22cdc3c1e5816fa50495d4565526266af3534137cbe6bcdb89283ed78d25e2396766807763fb8b17139cca711ab5c906bd6cdf5f6762a4c6c4d57c495a8021c895d9396ab047bbac9214c33469c904efef7ac7105c9c006bd604f75dff331ae861b3813fe9daad037daa1cb5cdcda3157cc1700a7be0ddd13ea0e497b18b4ca882066b6e7a3c9c90a2a59807bd9e012aef4bb259ff39295ab14927de54e1e33ca0294c7c0d6b09d3f59b72102a157d9198fedc20274968b06ca9e0b0d4bd3e67e2b148b5da1d44459965469a236db5d5c937d425e914bde6ea778f2869f2d76a5b990b6db6efcf1e19cdac4ac", 0x1000}, {&(0x7f0000001cc0)="5464aad6686c0f55aef30b24935f03587999e89cf318588a034239337e841f8a2de8851d586e5cd5537324d339841aefa3d70bef462af621a2923e144ce9653906a3fe49dcc581b8eade9765b2a6228e3b48ecc1d7c7d46ec860c12d85c4d6b0", 0x60}, {&(0x7f0000001d40)="57746a4afb6f3ed0eb532026bd255b4bf7754a1b3249a4b16b6ead20f2712c5dea5b3ea909e1c29bd390a67ad9f7b126d7312661d2d4e28ddc489ad6a2c52b2ba18028cdd2f97ab7472ee64443f75505ec8def5cbaa03f50c3df9825ac99f97879cbf9705d18b0851f2a521f9b8289316d6fa319078ef6e4f3102337a3be7aa9807c56ccc975beb6bf263d21aaaf8920d1e04ab32c73371dd38f283e36cd5f95876ad209ff15381265e421c9bd4672322e8bfc34d2973a3548d9f6a65469357259658a17cbbd0df108d3ce0cd6f5abe66b28eff1ce9c25b58f", 0xd9}, {&(0x7f0000001e40)="e79f8923240a20490cf469bb0fe198719fa56a1b7b8fa19fe4e94037be0b", 0x1e}], 0x4, &(0x7f0000001ec0)=[@timestamping={{0x14, 0x1, 0x25, 0xb}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001f00)="40a979dd4670f7af8b649b44cc84363db686d5f25a6fc8b5e118d4c5cc922a3dccd1b768da34d32a14ef1b42ad6aad7eec37e5afc4a71d4e5c73cd1f2ca623844ab65f0059c1d6a6fbe396f446adfde3bf34423aa4c60bb54ef61a1af0b430b71146acc8d20c761776caa738ba7be1fc058476689a89d92c7d812cf2", 0x7c}, {&(0x7f0000001f80)="0bc5edbfc3243090244620d6f4cf3f3298074fd09f6aaec0c572e05e4105b50222ae5c08396126555e1a704959cd5915063bfae34c333435a222883b9d35464293addc24807ec1cffb3ace70611177943fae2b696a72ed44fc73ce60761517", 0x5f}, {&(0x7f0000002000)="69c4a12f40ff9306122aa8ce2e68acf5f8c503504084e79ef74dd8f465ca1d0e369ee55da3e80b06b9eac2c527f62f9bcbd6626263c8660b60b70f69a0bdbb57a52aadfe49b6f2ab03ba6703e1de13a305d75b67231199abccdaf9da131c54a17b732e9c867ee523ca3b2ee1592ce75bfb2093d9b03640f1f653d5c431011e0a7c5a9e869b3c55d0803fbfcc5b22ded803b8d825bd68b5c07fac6ad48d0b8877", 0xa0}, {&(0x7f00000020c0)="8f71bbff8d4f550e807989fae167b3eaefc6b0b9f1191a51ab166e18dc4a4725a4563cb0212d809e", 0x28}], 0x4, &(0x7f0000002140)=[@mark={{0x14, 0x1, 0x24, 0x8}}], 0x18}}, {{&(0x7f0000002180)=@generic={0x2b, "846725d77c6c7ea1a4d8bb2a173281285666cb519a9e29fe3e26c704442f18d09dd16159dbf28a43ce8fb09f429893e8a7646dd7362336b7aad29d052862bb33138975b23f38367ecc811c718e880d3d3ec0c462a0d458b7097222d276f8b4cefbc43b71c08249cd8bb858d9fdddc4f913b0d93f44b3d12254d63cb8f723"}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002200)="42ab4176e2b3b23890b61b30981efa79edf17a238f33adcca35730a68cd56d91d5d96603d160c1a58c3b1f59fb6eb7a5df6fb50e4e511d6ea5460c51f699efaf8f6b920cf9e77ca5dbc15ad5810bf8c05d8e3fcfacc017725a6e81b5a4fed4b041680dacc66cac9c880d60ffa9fa2d4d1f85ebecaf0b8aa63c487153c281a6e1f324c90f", 0x84}, {&(0x7f00000022c0)}, {&(0x7f0000002300)="4375c0e989ec9c4016f657cd2159e71cb472e1341c538a15bfcfba2284469ef8136e4a69a42131f845a14b08406f0ee1484e960b56c1751098498c15c542e75ff5bcd03a4f8359ff726c6b20ee09580ec4ce50d0ec9ce9e21e9527b243419333876f480da9f0a5db326f8ecaff87b94f12f50028b3199ee174f4d1b65ae86660c6528bbeb86e4a46fc82fbca52a98668aa80fab62c3018d34f1d0b9b3a66b7661c589cbb703968373ccacc376b225d9c", 0xb0}, {&(0x7f00000023c0)="b6c65dcf8d6dffc441fd21280d49ed300a3cf587ead3b6", 0x17}, {&(0x7f0000002400)="4980d59c6df1d5ac74338b2bc64d91e3e2ae8850dbe28c5acfd1d441bee2075da3ef5dd29100c804aaa8bd0b862805dc0be6fb15cd76a059aa99cc4a8677ddb3e6c6e184d18148606767c4d088b1575a70aef69d2efcdb1584077405858073139e60f0a42add6346ee68569d9bddfb2a6ef0ad7212e43152b2b778c2733bdce33dcae13ee24038602700c57e141143dc18208a", 0x93}, {&(0x7f00000024c0)="b69c3d37880c1cd34d7a4785c34c580c1a6f03cb9766763d1d7a9fc952e3fb9c64958b50c1", 0x25}, {&(0x7f0000002500)="a3545f11c91cfa6515346bad827c7a4e7ce7c3380e76e8bfbb7b8fd1ec2b06267dbe0cddaf1aeb5361f7e2f9ea8109568490451f3a619dd3c88f06a1835f90539b7db6184b305cb0a68e7fa1c861b56ad0cb23ff9b05358bec4f9a65aeafbbfafb5e8639df2edcb1501d2fa938d7121ea4adeadf0fb7cd00b76de4195dcc5ad846738151f24d0c676550e9162cd9436df4828fa820b605dc7908bdf6a7937c", 0x9f}], 0x7, &(0x7f0000002640)=[@txtime={{0x18, 0x1, 0x3d, 0x10455939}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x7fff}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0xd8}}, {{&(0x7f0000002740)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x3, 0x4, 0x4, {0xa, 0x4e24, 0x2, @remote, 0x4}}}, 0x80, &(0x7f00000039c0)=[{&(0x7f00000027c0)="4064e53bbf0685ec34b4988e6b20efe79b3c853fd1fddcc6b9ab586572ef8253b86abe5140651e63f9fd529cbd2c590fd4550c4994322f61c687e12ee716773046ad83e417df9ebb1b6915d9c59d4a5c7fbc7a518caa1b00ecb81d686eb4ccba56346215ec5638cb9822898567e502a34a89c70a8683cfce83c7143c72875d909cd6679b8f9bdf7d16a45bd7d4e9e2f7d6013e0264448da8db89ee3c49216de10e2bab79", 0xa4}, {&(0x7f0000002880)="8fcd86a05c2b2dd204d350d0", 0xc}, {&(0x7f00000028c0)="53ef162ab558237fda6b5383738862cc2e76d6ee35ac122107ffc7198abd3c71dfd7462c318cc1379f6e2e3ba34bbbd203f94b38c5119b587cd83953f7f509e4c40ef9079fa3f79aac17ada9ed7c36f32485aa59a5dd835d5c478024a2b01cfde9c62594db9954e934002b7855a6ca61ea017c55e98fed7e0c56a132b24415", 0x7f}, {&(0x7f0000002940)="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", 0x1000}, {&(0x7f0000003940)="d8caad7c52d51487519fddbb2a827418c284e8f05541f6643fb15ff5bd304c93e2b377814012795b23fe08a84a6d55c9e672a3a728853b45c7b111d6aff066bd7a8f55ae7da3eb42cc0e42e9fb36ee28fb700bf404af1493b5165591dac6c749d78744bc2bb6811cbc8033", 0x6b}], 0x5, &(0x7f0000003a40)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}, {{&(0x7f0000003a80)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003b00)="5ad2a3f71e5b32f5f79dbf66f7b0c627f157af39f387f9cb75098a64bdd2ff5b98ffa9da77d4d973f3b8b6f68a74012aa15e2f015ddcabe44f08f6a3f41280ae5fb763bef0e4f65407ca12512886f997634d075e2d19e2dd57577d4a7bb98a86a771b43ece2bfa4aa18976981ecce8bf09fd38b832bb06fb89a31e85aa1dc92400f241aa2bbfa6faf75b", 0x8a}, {&(0x7f0000003bc0)="40b804a1cdf209a10e2ef94c6a907f6776eee873a87ce072953421788230bf903701dbd2abc0bd8885595b5668b65e0e403bb55782c37367e5e65c098d18bd65e8317e9ae624fca1411b3ecce7dfd4d7251f26209d042ab59fadb0b10a03149a9bb3055ab71c52aa191f64147bce327fd3a4d829f73db20a66723a321f10d938519de503840c8b3db59f358abd3ca74d8d0d249664f93dff8f8b1a86c8b2dd2e436ba2e9a2ae28d6aae5d6c5", 0xac}], 0x2, &(0x7f0000003cc0)=[@timestamping={{0x14, 0x1, 0x25, 0x101}}, @mark={{0x14, 0x1, 0x24, 0x81}}], 0x30}}, {{&(0x7f0000003d00)=@llc={0x1a, 0x0, 0x0, 0x2, 0x1, 0x0, @random="656445de8ae8"}, 0x80, &(0x7f0000004040)=[{&(0x7f0000003d80)="25c412d1de8595acff0dc7760f5c1fc238554467a426c9c41c2e107f27f9f00f82c682810cf8249f0f772624d95a3e7754b2f62288c16c839a776b2c603e233c031ab6e2f4c1a09469d9c5e2eb94e3de184261467ee38b32a1a1479e564c186d0261c1022e7500b23de55e1cd5d34bc3e973b1d279f4162fc61e87bd9001a8933ee221ed1a0ae0a314f1bc620a57cbff983d6b93d4ea2b99c0377ad7dbca41faa21069e15a32ecae80f9d122b0e84204a37e13623abb588a7757cb7e9148c4fb4d91d40532043e9fae3bdf076e090933ecc129f3e4016066f2813c82c2", 0xdd}, {&(0x7f0000003e80)="28aa3331b11673ba579bd203ee80db531f84d787570689bbf6b11d142787c38d515611b72b8431da4f69eea69f7d2fb5ddcf9f8aa5b8f98964b60451ea1186c0206857a244500a19cc12d20592a8a750c7e5857365034c2c6921c94eaad3f2a1c45c10243c6b9ec4db18c1e6e5ebc4caadb858850eee0b411ddf72e4afd354ecdc50fb940185de15d5c026f1bc1f70185f430cedc2d46ff80ef2fe0a5c8dd7ed90dc7d52e0a7ed639a579dee347ee91b3bbbc394824f2c592645b04d9a0b32", 0xbf}, {&(0x7f0000003f40)="faf4192d45820177968918177f997c6684d1c7418ff63c99b7370be266ddeac77ab4a355fa2572572ba3a4b06fe59851bb89a4dfb4f0aab15079a3220e63eb0813d30d046675e1c1b3bc5666a286b7665c3d972451a5d967", 0x58}, {&(0x7f0000003fc0)="8c65ded72c0f143cf73b147833586aa134ac59f14b941146b69fb7a201471de90b2019588cf775348b8ebe46b40355bd062415fc541f66785f88f901620cc1558bf4883030e15808295c3ee386988aea46cd987988", 0x55}], 0x4, &(0x7f0000004080)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x30}}, {{&(0x7f00000040c0)=@can, 0x80, &(0x7f00000045c0)=[{&(0x7f0000004140)="e4568140ce958d4220b79fbaca49fa43e6404eebad2ff2dfe2c519e5e6747e703416d8659b042c9f86ff05144d2b88da0583fe2c57baed35f29db85522e39532ec289be17dea4be00c9f78d7a45fe7", 0x4f}, {&(0x7f00000041c0)="ecd5318481fa3d68b246c8f3ccdb9ab68c0a57a55050", 0x16}, {&(0x7f0000004200)="a8b985c043f915bca44d43aec8ba3ed6938583c9e167145ad06e21a7a1579ce7bd399e27ad5c988f86976044972048b77084d2d29fab8924f39790085deb8e49cf9582b36b43b2e9b3662ff9ebc650c61585554df38209b627f33f0cda817fdc7795f181408337c61e1ac64dbf2f86d07cec19df94d465fb4130df130c07b8395f92e453ef009abf12add41eef8b3f2b20ba7affe73e6985bdeab8a5b92e4a2fef032d00c154364093c78fb6f599c3fcefc4e3160d15ecd3f693fdf7d864552a1d3112dda03a83c1ab573dc989b0aa3b71b31106a09bec69e9f12268a58e77aba661640175a4d1d76f366ac69bdca0a0feb5ba35", 0xf4}, {&(0x7f0000004300)="d20c454ae4c5072a2b86b5c102bfdaa5121ae244352dceee7a9c961c1f18e0e8493a8e687f698c4ec125bfdea90f92b4af65030ccd009b4bb515", 0x3a}, {&(0x7f0000004340)="9e43e5b0a60630ddaa1bf10ff8ff7a0f6c56e295075a747ad0d89f329ec9baf50b97e6579a234bc84aa74ff5a6ca7600ff43fbacd836562a15ed548de0dd0ad343f33f8d2cc1a07db31c6d1ef5ce92f34709dfbb87a70fb63f1c1cf5309aa65c87486b3cf4be07c669839c86e1c0721d012e5b5391dd031031b1a47fba7ec274b4c5a9f347b7dc8b0b15ff3b5b78bde5781ad7425eea1b2d27babd5d547970", 0x9f}, {&(0x7f0000004400)="c56d0878f0b751894d34dc223061ca86dba76cb1dcb1282ec6824f416db4e6cb2611a605c3ade7537b5b6b47b0fd1ce998257f3b3829c68b21", 0x39}, {&(0x7f0000004440)="343137d5b20bad1f0fe4bc2cd302c7c71ef7249cde15a0f57c9e720744a4e409551195372e962d504fedd99f14235974ebdee8b52fbae22b882b1b13cd37d7eccc56aa22e2edecacaac5166acc48ec248afeee20538ba4ded11382897ee37a29945867139dcc1bfaddf881b2d512c67f05b82fdc83c6248d06379dfcd3dea2c8a0319ed12ed35217b06ca1ce65ec8bb34e12a03a321fa224b8f38cba49b20c370d659f0ae48346d0eadd91b18d1b14ab0002f7eb8bc80e0d059cbb91e57c28755852b9de1519723dfe2735e0f41cef39cd60f7fff9d71add96e04291b56eef5721189f330c9891245796df725eb5867d412f081c0cb9d935bbb847", 0xfb}, {&(0x7f0000004540)="1f4e5ebd1308bc8eb87d33118d1cb63e4224d9d56bba975d63ebe89895676845b5d9cdbf921005c806c35d212de9b2ea05480acbb6660f9dcc9816eac97a4012d914aa942823883c002c0f4e33463e54ed98ef8b304f35fdd030e2d79304e468df0943a3dfd76a8e1a0c5d", 0x6b}], 0x8, &(0x7f0000004640)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x30}}, {{&(0x7f0000004680)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x2, 0x0, 0x1, 0x3}}, 0x80, &(0x7f0000004940)=[{&(0x7f0000004700)="bcb99dfb00cbe63e6ef91f7f43f63778b889ae8bb9b828afdb4bba689f5b98999dc182f43e4352d625b7959655a8623bed9622a30063df17962e62742346fa879d769435884783f1183348f1f6f5b1105471b5c1c6cd46e5abe3dd33d6d8ea4a1b79d4ab5acc4a790ab8b21b3d0e30279fd654a23a21e29c4467e63a98466eb87279e2748550f36b022c73fdf197dd78b5a38f45fd3e45d5ab5a8911c67dc04907773955d6d95456504f22ca2660e35be31cdf159f04", 0xb6}, {&(0x7f00000047c0)="2ffe00673fbeec0b8396abcf42e3742eadf86a68db18b1f1531f15a17da8f0c15f016007592bcf6f55548186c421c6e3b8aa72812f6a6f52e1d88ca8ea108aec284144977afd1235aa14016f8b18c0291912db9f204767d1b796957db2a0f805edfed7af1f79fd9d468fe628b58c0651a3ebec0770896cecb471ee960ca93f61d805a8368fdb82de114e1530baad9223ce3bc8142d2a7ecd6e6072c73ad59f06c3334be9e1807a1e627751", 0xab}, {&(0x7f0000004880)="c30e203b2fedb5ed04bd5978fce03bc06668448612123d0708427c6d34e4ccd6508b9b89fed9cb52064996d17953f8aea8f1806da2050da49651eb5e488ca78eb0f5f9b84724cf3a4f0285ab4ae2f28f93987529f736e0f741bfce0577aa066cacbc85fdbd92784586f2cee0b8d8b9f5ce7a77b8c420cfeab67e89690adf1bbdbacad50995882be167cf9b65a2b4cc0375b47ca735a3d165673f83c4af20adcf7869f56be4236ee48b2d42084fa140d6bc6382", 0xb3}], 0x3, &(0x7f0000004980)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x10}}, @timestamping={{0x14, 0x1, 0x25, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x78}}, {{&(0x7f0000004a00)=@ll={0x11, 0x1, r6, 0x1, 0xd2, 0x6, @broadcast}, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000004a80)="e7376a69613eae78439826437741205a3903cded300aa6078f0ec989da8b864e8ac53f4eb6403211e51dfedadbba7478f49f65206d98c4e36d7eed10ac44d452f07ddecc59c0d7eac6dc3a716397b71df80807ac2516d38d3993d32d8f1f0f1a55c8d63006162d6c9a4b4a9066056708971713703f998ca2b014a3bf95040030b700d5426509cb24f7faee74a95cfd489f590dce664824f1691553e7d0124974e9df09f03c7b092254c5d746ce96862d48831f9963b487b47aa868f5d324e15aef0ec4edd89285b5046a5ced5590de6cd59e570f1ff2d13bdbea0fe714fbfd931cf91e", 0xe3}, {&(0x7f0000004b80)="5a7ea4118e", 0x5}], 0x2, &(0x7f0000004c00)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x48}}], 0x9, 0x40080d5) sendto$packet(r3, &(0x7f00000003c0)="0eb2bb250f9f808ba58358c2a5a7957da94023c149d94879592ff33b1d3fd248305107b063bd844194a7fccbb2f0125fec03058d29bb243f855c708fc8dc4c92eac1d003da54e2513cb7024dcd07665d62f144f32f1e97c05a59029d0908a2b21bb7c5528926316bd47342831f4265d9e6e34d5f112f01007b0a05f19fe60c65069bbca6439ee70d9c6cf97334d99020dd181140d015d600779cd743c1aa64e10a7ecb82791b3b513ee3ecde33374626a500de", 0xb3, 0x10, &(0x7f0000000480)={0x11, 0x1, r6, 0x1, 0xe4, 0x6, @random="48e761b5ef57"}, 0x14) ioctl$SIOCGIFHWADDR(r9, 0x8927, &(0x7f0000000000)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x5, 0x400, 0x9, 0x81, 0x101, 0x86a4, 0xc40, 0x7fffffff, 0xfffffffd, 0x1, 0xb, 0x16, 0x0, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="020100030a00000000000000000000000300050000000000020000000000000000000000000000000200100000000000ffffffff00000000030006000000000002"], 0x50}}, 0x0) 218.411374ms ago: executing program 1 (id=3430): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}, 0x3}], 0x1, 0x62, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000000)=0x3, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 215.998321ms ago: executing program 2 (id=3431): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @accept_logical_link={{0x439, 0x21}, {0x13c, {0x71, 0x4, 0x2, 0x16}, {0x5, 0x0, 0x8, 0x1, 0x1, 0x3}}}}, 0x25) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x7, [@float={0xe, 0x0, 0x0, 0x10, 0x8}, @fwd={0x1}, @float={0xf, 0x0, 0x0, 0x10, 0x4}, @volatile={0x1}, @typedef={0xa, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x30, 0x61, 0x30, 0x9832758d45d854ae, 0x5f]}}, &(0x7f0000000100)=""/85, 0x5b, 0x55, 0x1, 0x1ff}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1c, 0x5, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x4}, 0xffffffffffffff3e) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x8c}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 215.202367ms ago: executing program 3 (id=3432): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x448, 0xffffffff, 0x2e0, 0x0, 0x2e0, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x84, 0x0, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e23], [0x4e21, 0x4e24], [0x7f, 0x8e, 0x7, 0x0, 0x8, 0x2d, 0x9, 0x7, 0x60e91136, 0x9, 0x1ff, 0xfffffffe, 0x9, 0x4, 0xa, 0x95, 0x20000, 0x2f3c0e1c, 0x3, 0x7, 0x4, 0x5, 0x200, 0xffffffff, 0xe, 0x7f, 0x2, 0x0, 0x1, 0x0, 0x2, 0x7, 0x6, 0x7, 0x3, 0x40, 0x9, 0x9, 0x7, 0x9, 0x9, 0x730, 0x5, 0x3, 0x10, 0x101, 0x1, 0x800, 0x80, 0x9, 0x7fffffff, 0x0, 0x3, 0x6, 0x1, 0x4, 0xffff, 0x6, 0x5, 0x3, 0xffffffb0, 0x9, 0x1, 0x3], 0x4, [{0x1, 0x4}, {0x1, 0x6, 0x9}, {0x4, 0x4, 0x1}, {0x40, 0xf9, 0x8}], 0x2, 0x3, 0x4}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x3, [0x2, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x0, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x6}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) 97.560542ms ago: executing program 0 (id=3433): r0 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) close(0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0xffffffffffffff8d}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) 5.181105ms ago: executing program 3 (id=3434): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) close(r2) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000b00)={0xffffffffffffffff}) close(r1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r7, &(0x7f0000000000), 0xe) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000000580)=0x4000000, 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r12 = socket$key(0xf, 0x3, 0x2) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000900)={r4, r12, 0x3, 0xde, &(0x7f0000000640)="a4f10e23b5e6a40d5b28b19551647b34b377a7fe099c68fba8829b0d86922a42c2721372618a57040fe7ba4807e87f5f94a5c9c3257b01d2f48e078109f616281cd7300f15f21f91301f1999f4d7b359c092518b51bc3f69b4573ca6b5e020647604fad2163599fd5ce9b94f1974b69ca6f9ac3da7ecc87dcb95e1b0f9252301858ea7a58dd75d13fbaffa37eae92138e0a46ac03708b9dfecf5ba6b5e457e9addbd4601b2d613147e072965028aaec0c4225ab0ead3f2b5194b34757549360911d5f729d9c081d6a89884923d81f693e75340135f49c1f382f4451baf16", 0x9, 0x15, 0x3, 0x7, 0x5, 0x3, 0x428, 'syz1\x00'}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r15 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r15, 0x0, 0x0, 0x50040, &(0x7f0000000500)={0x11, 0xb, r14, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r16 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r16, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) 0s ago: executing program 2 (id=3435): bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff, 0x2b, 0x0, @val=@netkit}, 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@deltfilter={0x2c, 0x2d, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x5}, {0xfff2, 0xb}, {0xb, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) (async, rerun: 64) r3 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) r4 = socket(0x2d, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000300)={0x2d, 0x0, 0x4001}, 0xc) (async) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007919b8000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) (async) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x4004084) (async) close(r5) (async) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ce0bb03a", @ANYRES16=r8, @ANYBLOB="100028bd7000fcdbdf2514000000050019000100000008000800250e000008000a003f000000080014000800000008000a00060000000800160000006402"], 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x20008881) (async) r9 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) poll(&(0x7f00000000c0)=[{r6, 0xb218}, {r6, 0x241}], 0x2, 0x3) (async) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000080)={0x0, r9, 0x100000001, 0x1, 0x5, 0x7}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r11, @ANYBLOB="010000000000000000002c00000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r12, &(0x7f00000026c0)={@val={0x8, 0x800}, @val={0x2, 0x4, 0x4, 0x6, 0x3, 0x3}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x1dc, 0x63, 0x0, 0x3f, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e22, 0x1c8, 0x0, @opaque="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"}}}, 0x1ea) kernel console output (not intermixed with test programs): tlink: Key 0 has unexpected len 4 expected 0 [ 205.374373][T11765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.386994][T11765] netlink: 'syz.4.1628': attribute type 21 has an invalid length. [ 205.407055][T11765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1628'. [ 205.837017][T11786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1636'. [ 205.985750][T11788] netlink: 'syz.1.1637': attribute type 2 has an invalid length. [ 206.112722][T11800] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1640'. [ 206.139767][T11802] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1640'. [ 206.342678][T11817] xt_addrtype: ipv6 does not support BROADCAST matching [ 206.471012][T11822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.501709][T11822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.536511][T11822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.559392][T11822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.597399][T11832] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1651'. [ 206.615723][T11832] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1651'. [ 206.617301][T11836] netlink: 'syz.1.1653': attribute type 1 has an invalid length. [ 206.729389][T11836] 8021q: adding VLAN 0 to HW filter on device bond9 [ 206.761172][T11845] netlink: 'syz.4.1651': attribute type 21 has an invalid length. [ 206.787204][T11840] bond9: (slave geneve4): making interface the new active one [ 206.796670][T11840] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 206.822314][T11842] lo speed is unknown, defaulting to 1000 [ 206.840348][ T47] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 206.854613][T11842] lo speed is unknown, defaulting to 1000 [ 206.873151][ T47] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 206.906633][ T47] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 206.941857][T11842] lo speed is unknown, defaulting to 1000 [ 206.943159][ T47] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 206.970431][T11842] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 206.998485][T11842] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 207.018593][T11842] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 207.039996][T11857] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1657'. [ 207.069467][T11842] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 207.166323][T11842] lo speed is unknown, defaulting to 1000 [ 207.181527][T11842] lo speed is unknown, defaulting to 1000 [ 207.199288][T11842] lo speed is unknown, defaulting to 1000 [ 207.219547][T11842] lo speed is unknown, defaulting to 1000 [ 207.229181][T11842] lo speed is unknown, defaulting to 1000 [ 207.470594][T11865] can: request_module (can-proto-3) failed. [ 207.492790][T11864] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1661'. [ 207.646762][T11877] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 207.829913][T11887] bond0: (slave bond_slave_1): Releasing backup interface [ 207.992733][T11896] sctp: [Deprecated]: syz.4.1672 (pid 11896) Use of int in max_burst socket option deprecated. [ 207.992733][T11896] Use struct sctp_assoc_value instead [ 208.163550][T11906] netlink: 'syz.2.1675': attribute type 10 has an invalid length. [ 208.172258][T11901] ipt_ECN: cannot use operation on non-tcp rule [ 208.239061][T11906] team0: Port device geneve1 added [ 208.428658][T11918] xt_ecn: cannot match TCP bits for non-tcp packets [ 208.447578][T11923] netlink: 'syz.4.1682': attribute type 2 has an invalid length. [ 208.960807][T11958] sch_fq: defrate 0 ignored. [ 209.079156][T11964] Cannot find del_set index 4 as target [ 209.085486][T11964] x_tables: duplicate underflow at hook 3 [ 209.173278][T11967] syzkaller0: entered promiscuous mode [ 209.179424][T11967] syzkaller0: entered allmulticast mode [ 209.216886][T11918] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 209.230849][T11966] netlink: 'syz.3.1689': attribute type 2 has an invalid length. [ 209.240823][T11966] netlink: 'syz.3.1689': attribute type 2 has an invalid length. [ 209.437077][T11979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.555712][T11986] vlan5: entered allmulticast mode [ 209.561024][T11986] bridge5: entered allmulticast mode [ 209.573490][T11986] bridge5: port 1(erspan0) entered blocking state [ 209.591610][T11986] bridge5: port 1(erspan0) entered disabled state [ 209.606994][T11986] erspan0: entered allmulticast mode [ 209.617228][T11986] erspan0: entered promiscuous mode [ 210.024843][T12003] tipc: Trying to set illegal importance in message [ 211.824630][T11997] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 212.136184][T12021] __nla_validate_parse: 13 callbacks suppressed [ 212.136203][T12021] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1708'. [ 212.173968][T12021] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 212.412042][T12039] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1712'. [ 212.711984][T12058] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1717'. [ 212.750577][T12062] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 212.781665][T12065] FAULT_INJECTION: forcing a failure. [ 212.781665][T12065] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 212.830283][T12065] CPU: 1 UID: 0 PID: 12065 Comm: syz.2.1719 Not tainted syzkaller #0 PREEMPT(full) [ 212.830300][T12065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 212.830311][T12065] Call Trace: [ 212.830316][T12065] [ 212.830320][T12065] dump_stack_lvl+0xe8/0x150 [ 212.830340][T12065] should_fail_ex+0x40c/0x560 [ 212.830358][T12065] _copy_from_iter+0x1d3/0x1660 [ 212.830381][T12065] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 212.830397][T12065] ? rcu_is_watching+0x15/0xb0 [ 212.830410][T12065] ? trace_kmem_cache_alloc+0x29/0xe0 [ 212.830426][T12065] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 212.830440][T12065] ? __pfx__copy_from_iter+0x10/0x10 [ 212.830454][T12065] ? __alloc_skb+0x276/0x7a0 [ 212.830463][T12065] ? __alloc_skb+0x276/0x7a0 [ 212.830474][T12065] ? netlink_sendmsg+0x650/0xb40 [ 212.830485][T12065] ? skb_put+0x112/0x210 [ 212.830496][T12065] netlink_sendmsg+0x6c0/0xb40 [ 212.830511][T12065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.830524][T12065] ? aa_sock_msg_perm+0xf1/0x1b0 [ 212.830540][T12065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.830550][T12065] sock_sendmsg_nosec+0x13a/0x180 [ 212.830566][T12065] ____sys_sendmsg+0x54e/0x850 [ 212.830579][T12065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.830594][T12065] ? import_iovec+0x73/0xa0 [ 212.830606][T12065] ___sys_sendmsg+0x2a5/0x360 [ 212.830616][T12065] ? __lock_acquire+0x683/0x2cf0 [ 212.830628][T12065] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.830655][T12065] ? __fget_files+0x2a/0x420 [ 212.830664][T12065] ? __fget_files+0x3a2/0x420 [ 212.830678][T12065] __x64_sys_sendmsg+0x1b1/0x290 [ 212.830690][T12065] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 212.830709][T12065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.830720][T12065] do_syscall_64+0x174/0x580 [ 212.830729][T12065] ? trace_irq_disable+0x3b/0x140 [ 212.830738][T12065] ? clear_bhb_loop+0x40/0x90 [ 212.830750][T12065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.830760][T12065] RIP: 0033:0x7f996bb9ce59 [ 212.830771][T12065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.830779][T12065] RSP: 002b:00007f996cab6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.830790][T12065] RAX: ffffffffffffffda RBX: 00007f996be16090 RCX: 00007f996bb9ce59 [ 212.830797][T12065] RDX: 0000000020040000 RSI: 0000200000000380 RDI: 0000000000000004 [ 212.830803][T12065] RBP: 00007f996cab6090 R08: 0000000000000000 R09: 0000000000000000 [ 212.830811][T12065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.830817][T12065] R13: 00007f996be16128 R14: 00007f996be16090 R15: 00007ffca5092918 [ 212.830832][T12065] [ 213.125537][T12067] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1721'. [ 213.254791][T12073] netlink: 768 bytes leftover after parsing attributes in process `syz.0.1720'. [ 213.312461][T12078] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1724'. [ 213.506092][T12085] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1726'. [ 213.526133][T12086] netlink: 'syz.1.1725': attribute type 1 has an invalid length. [ 213.555372][T12086] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 214.068068][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 214.589731][T12145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.602997][T12145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.988832][T12173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1747'. [ 215.000270][T12173] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.1747'. [ 215.121203][T12180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.149401][T12180] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1748'. [ 215.255486][ T3108] lo speed is unknown, defaulting to 1000 [ 215.267060][T12193] netlink: 'syz.1.1752': attribute type 8 has an invalid length. [ 215.589495][T12197] block nbd0: reconnected socket [ 215.593963][ T5636] block nbd0: Receive control failed (result -107) [ 216.383020][T12235] syzkaller0: entered promiscuous mode [ 216.398456][T12235] syzkaller0: entered allmulticast mode [ 216.668888][T12253] siw: device registration error -23 [ 216.676940][T12256] netlink: 'syz.0.1772': attribute type 1 has an invalid length. [ 216.772945][T12256] 8021q: adding VLAN 0 to HW filter on device bond5 [ 216.836153][T12261] 8021q: adding VLAN 0 to HW filter on device bond5 [ 216.856694][T12261] bond5: (slave gre1): The slave device specified does not support setting the MAC address [ 216.869242][T12261] bond5: (slave gre1): Error -95 calling set_mac_address [ 216.942362][T12256] gretap1: entered promiscuous mode [ 216.966589][T12268] macvlan3: entered promiscuous mode [ 216.986505][T12268] macvlan3: entered allmulticast mode [ 217.446741][ T3108] IPVS: starting estimator thread 0... [ 217.483824][T12303] reject_tg_check: 1 callbacks suppressed [ 217.483840][T12303] ipt_REJECT: TCP_RESET invalid for non-tcp [ 217.558014][T12302] IPVS: using max 34 ests per chain, 81600 per kthread [ 217.733334][T12322] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 217.851114][T12329] __nla_validate_parse: 9 callbacks suppressed [ 217.851131][T12329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1792'. [ 218.096659][T12346] can: request_module (can-proto-4) failed. [ 218.186818][T12351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1800'. [ 218.382263][T12365] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.1804'. [ 218.418238][T12368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1805'. [ 218.492089][T12368] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.724833][T12386] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1811'. [ 218.784039][T12388] bridge_slave_1: left allmulticast mode [ 218.809323][T12388] bridge_slave_1: left promiscuous mode [ 218.825982][T12388] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.856487][T12396] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 218.869665][T12388] bridge_slave_0: left allmulticast mode [ 218.877679][T12396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1815'. [ 218.890820][T12388] bridge_slave_0: left promiscuous mode [ 218.896724][T12388] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.159568][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1819'. [ 219.397452][T12426] bridge0: port 3(ipvlan3) entered blocking state [ 219.408781][T12426] bridge0: port 3(ipvlan3) entered disabled state [ 219.415900][T12426] ipvlan3: entered allmulticast mode [ 219.421905][T12426] bridge0: entered allmulticast mode [ 219.452856][T12426] ipvlan3: left allmulticast mode [ 219.462041][T12426] bridge0: left allmulticast mode [ 219.686143][T12444] syz_tun: entered allmulticast mode [ 219.895941][T12450] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1832'. [ 219.934324][T12450] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1832'. [ 220.062757][T12459] tipc: Enabling of bearer rejected, failed to enable media [ 220.076856][T12459] tipc: Enabling of bearer rejected, failed to enable media [ 220.087459][T12442] syz_tun: left allmulticast mode [ 220.097517][T12462] xt_hl: Unknown TTL match mode: 255 [ 220.114725][T12459] tipc: Enabling of bearer rejected, failed to enable media [ 220.267838][T12471] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 220.290955][T12474] sock: sock_timestamping_bind_phc: sock not bind to device [ 220.301709][T12473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1839'. [ 220.795959][T12503] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 220.808897][T12505] veth0: entered promiscuous mode [ 220.855531][T12511] netlink: 'syz.1.1849': attribute type 6 has an invalid length. [ 220.870644][T12510] netlink: 'syz.3.1848': attribute type 4 has an invalid length. [ 221.055161][T12515] bond6: Unable to set up delay as MII monitoring is disabled [ 221.067068][T12515] bond6 (unregistering): Released all slaves [ 221.094319][T12504] veth0: left promiscuous mode [ 221.149785][T12517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.168303][T12524] syzkaller0: entered promiscuous mode [ 221.182932][T12524] syzkaller0: entered allmulticast mode [ 221.205487][T12515] tipc: Started in network mode [ 221.210652][T12515] tipc: Node identity 8a477dcb86fa, cluster identity 4711 [ 221.218222][T12515] tipc: Enabled bearer , priority 0 [ 221.226360][T12515] syzkaller0: entered promiscuous mode [ 221.232377][T12515] syzkaller0: entered allmulticast mode [ 221.248968][T12515] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 221.310941][T12515] tipc: Resetting bearer [ 221.318352][T12514] tipc: Resetting bearer [ 221.333388][T12514] tipc: Disabling bearer [ 221.596750][T12559] sctp: [Deprecated]: syz.0.1861 (pid 12559) Use of int in max_burst socket option deprecated. [ 221.596750][T12559] Use struct sctp_assoc_value instead [ 221.610716][T12562] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 221.888793][T12576] netlink: 'syz.4.1867': attribute type 1 has an invalid length. [ 222.129388][T12584] 8021q: adding VLAN 0 to HW filter on device bond10 [ 222.177702][T12591] macvlan2: entered promiscuous mode [ 222.206138][T12591] macvlan2: entered allmulticast mode [ 222.236113][T12591] bond10: entered promiscuous mode [ 222.269741][T12591] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 222.301668][T12591] bond10: left promiscuous mode [ 222.388108][ T166] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 222.700063][T12627] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.953108][T12635] bond6: option fail_over_mac: invalid value (16) [ 222.995597][T12635] bond6 (unregistering): Released all slaves [ 223.028130][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 223.246190][T12645] ¾x9ÿ: left allmulticast mode [ 223.273038][T12645] ¾x9ÿ: left promiscuous mode [ 223.288394][T12645] bridge0: port 1(1¾x9ÿ) entered disabled state [ 223.343302][T12645] bridge_slave_1: left allmulticast mode [ 223.355565][T12658] __nla_validate_parse: 6 callbacks suppressed [ 223.355583][T12658] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1886'. [ 223.385965][T12645] bridge_slave_1: left promiscuous mode [ 223.401794][T12645] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.446164][T12645] bond0: (slave bond_slave_0): Releasing backup interface [ 223.515960][T12645] team0: Port device team_slave_1 removed [ 223.529078][T12645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.548265][T12645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.568540][T12645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.586213][T12645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.609079][T12645] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 223.667803][T12649] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1885'. [ 223.889018][T12665] IPVS: set_ctl: invalid protocol: 60 10.1.1.0:20002 [ 223.948772][T12667] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1890'. [ 224.029483][T12673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.124333][T12676] syzkaller1: entered promiscuous mode [ 224.141377][T12676] syzkaller1: entered allmulticast mode [ 224.163473][ T3108] IPVS: starting estimator thread 0... [ 224.258505][T12682] IPVS: using max 34 ests per chain, 81600 per kthread [ 224.486980][T12699] tipc: Enabled bearer , priority 0 [ 224.495933][T12699] syzkaller0: entered promiscuous mode [ 224.501834][T12699] syzkaller0: entered allmulticast mode [ 224.510682][T12699] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 224.564687][T12699] tipc: Resetting bearer [ 224.596064][T12698] tipc: Resetting bearer [ 224.665084][T12698] tipc: Disabling bearer [ 224.771596][T12712] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1907'. [ 225.108915][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1915'. [ 225.145806][T12738] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1916'. [ 225.156760][T12734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1914'. [ 225.351985][T12753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1919'. [ 225.392111][T12753] netlink: 'syz.2.1919': attribute type 10 has an invalid length. [ 225.403116][T12756] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1922'. [ 225.417325][T12753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1919'. [ 225.425747][T12745] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.954568][T12784] netlink: 'syz.3.1931': attribute type 5 has an invalid length. [ 226.316584][T12805] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 226.472196][T12814] netlink: 'syz.2.1939': attribute type 2 has an invalid length. [ 226.726837][T12826] openvswitch: netlink: Message has 512 unknown bytes. [ 226.946657][T12839] tipc: Enabled bearer , priority 0 [ 227.020130][T12837] syzkaller0: entered promiscuous mode [ 227.037778][T12845] openvswitch: netlink: Message has 4 unknown bytes. [ 227.042217][T12837] syzkaller0: entered allmulticast mode [ 227.080635][T12837] tipc: Resetting bearer [ 227.144416][T12837] tipc: Disabling bearer [ 227.286553][T12858] netlink: 'syz.3.1951': attribute type 2 has an invalid length. [ 227.325163][T12860] : renamed from dummy0 [ 227.387262][T12864] netlink: 'syz.3.1954': attribute type 32 has an invalid length. [ 227.532994][T12877] TCP: TCP_TX_DELAY enabled [ 227.557231][T12864] bond6: option coupled_control: invalid value (192) [ 227.576057][T12864] bond6 (unregistering): Released all slaves [ 227.606220][T12878] tap0: tun_chr_ioctl cmd 2148553947 [ 227.967621][T12898] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 228.744912][T12929] xt_hashlimit: size too large, truncated to 1048576 [ 228.769994][T12931] x_tables: unsorted entry at hook 1 [ 231.225325][T12939] __nla_validate_parse: 15 callbacks suppressed [ 231.225343][T12939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1973'. [ 231.314584][T12946] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1975'. [ 231.327135][T12939] bond6: Invalid ad_actor_system MAC address. [ 231.344732][T12939] bond6: option ad_actor_system: invalid value (1) [ 231.356880][T12939] bond6 (unregistering): Released all slaves [ 231.422915][T12945] bridge6: entered promiscuous mode [ 231.429385][T12945] bridge6: entered allmulticast mode [ 231.443570][T12946] 8021q: VLANs not supported on gre0 [ 231.592061][T12960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1979'. [ 231.592477][T12964] netlink: 'syz.0.1981': attribute type 10 has an invalid length. [ 231.628702][T12964] openvswitch: netlink: Flow key attr not present in new flow. [ 231.636616][T12957] ip6_vti0: entered promiscuous mode [ 231.655285][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1977'. [ 231.698745][T12970] netlink: 'syz.4.1982': attribute type 1 has an invalid length. [ 231.789929][T12970] 8021q: adding VLAN 0 to HW filter on device bond10 [ 231.902363][T12970] bond10: (slave bridge6): making interface the new active one [ 231.954068][T12970] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 232.029976][T12979] vlan6: entered promiscuous mode [ 232.039944][T12979] bond10: entered promiscuous mode [ 232.045132][T12979] bridge6: entered promiscuous mode [ 232.053636][T12979] vlan6: entered allmulticast mode [ 232.061425][T12979] bond10: entered allmulticast mode [ 232.066798][T12979] bridge6: entered allmulticast mode [ 232.325022][T13010] bridge0: left allmulticast mode [ 232.482833][T13022] vti0: entered promiscuous mode [ 232.504208][T13022] vti0: entered allmulticast mode [ 232.528213][T13025] veth0: entered promiscuous mode [ 232.586275][ T3354] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x46 [ 232.605921][T13038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2001'. [ 232.616153][T13038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2001'. [ 232.676116][T13023] veth0: left promiscuous mode [ 232.694711][T13032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1999'. [ 233.113333][T13070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2011'. [ 233.256445][T13077] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2013'. [ 233.281967][T13070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2011'. [ 233.462960][T13090] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 233.839488][T13116] team0: Device ipvlan3 is already an upper device of the team interface [ 233.910106][ C1] bridge0: port 1(veth1_to_bridge) entered learning state [ 234.514522][T13149] syzkaller0: entered promiscuous mode [ 234.525703][T13149] syzkaller0: entered allmulticast mode [ 234.650765][T13149] batadv0: entered promiscuous mode [ 234.684653][T13149] macsec2: entered promiscuous mode [ 234.712547][T13149] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 234.744382][T13149] batadv0: left promiscuous mode [ 234.796482][T13177] netlink: 'syz.4.2044': attribute type 11 has an invalid length. [ 235.071476][T13183] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 235.176030][T13194] bond6: entered promiscuous mode [ 235.186830][T13183] lo speed is unknown, defaulting to 1000 [ 235.531661][T13223] veth7: entered allmulticast mode [ 236.055254][T13259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.145056][T13264] netlink: 'syz.4.2067': attribute type 1 has an invalid length. [ 236.262006][T13264] 8021q: adding VLAN 0 to HW filter on device bond11 [ 236.615202][T13289] __nla_validate_parse: 6 callbacks suppressed [ 236.615220][T13289] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2072'. [ 236.734096][T13252] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 236.741947][T13252] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 236.837099][T13252] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 236.847421][T13252] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 236.882693][T13301] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2074'. [ 236.908151][T13252] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 236.934957][T13252] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 236.981106][T13252] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 236.987253][T13252] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 237.909958][T13346] syzkaller1: entered promiscuous mode [ 237.940839][T13346] syzkaller1: entered allmulticast mode [ 237.970563][T13352] netlink: 'syz.3.2086': attribute type 4 has an invalid length. [ 238.198857][T13367] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2088'. [ 238.707417][T13389] geneve3: entered promiscuous mode [ 238.873438][T13411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.921872][T13413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2097'. [ 239.159542][T13424] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2099'. [ 239.453985][T13446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2103'. [ 239.606883][T13446] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.679920][T13446] bridge_slave_1 (unregistering): left allmulticast mode [ 239.691613][T13446] bridge_slave_1 (unregistering): left promiscuous mode [ 239.715965][T13446] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.734533][T13462] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2106'. [ 239.822948][T13462] 0·: renamed from hsr0 (while UP) [ 239.862379][T13462] 0·: entered allmulticast mode [ 239.867322][T13462] hsr_slave_0: entered allmulticast mode [ 239.873949][T13462] hsr_slave_1: entered allmulticast mode [ 239.902649][T13470] netlink: 'syz.1.2109': attribute type 1 has an invalid length. [ 239.903211][T13462] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 239.934484][T13470] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2109'. [ 240.242382][T13490] tunl0: entered promiscuous mode [ 240.299273][T13490] netlink: 'syz.0.2113': attribute type 4 has an invalid length. [ 240.340513][T13490] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2113'. [ 240.614546][T13519] netlink: 'syz.3.2115': attribute type 1 has an invalid length. [ 240.681664][T13525] xt_hashlimit: size too large, truncated to 1048576 [ 240.748376][T13534] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2118'. [ 240.754892][T13535] netlink: 'syz.0.2119': attribute type 11 has an invalid length. [ 240.803131][T13519] 8021q: adding VLAN 0 to HW filter on device bond7 [ 240.897249][T13527] bond7: (slave geneve3): making interface the new active one [ 240.930053][T13527] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 241.330307][T13562] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 241.375107][T13562] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 241.413915][T13569] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 241.579028][T13581] gre0: entered promiscuous mode [ 241.603119][T13581] gre0: entered allmulticast mode [ 241.795473][T13595] __nla_validate_parse: 4 callbacks suppressed [ 241.795490][T13595] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2131'. [ 241.821891][T13598] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2131'. [ 242.017122][T13606] netlink: 'syz.1.2132': attribute type 1 has an invalid length. [ 242.090686][T13614] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2132'. [ 242.128833][T13606] 8021q: adding VLAN 0 to HW filter on device bond11 [ 242.561946][T13642] netlink: 'syz.3.2136': attribute type 1 has an invalid length. [ 242.614468][T13642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2136'. [ 242.651559][T13643] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2138'. [ 242.667601][T13644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2137'. [ 243.202942][T13682] netlink: 'syz.1.2144': attribute type 4 has an invalid length. [ 243.238662][T13682] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2144'. [ 243.604338][T13667] bond0: (slave bond_slave_0): Releasing backup interface [ 243.637244][T13667] team0: Port device team_slave_0 removed [ 243.659745][T13667] team0: Port device team_slave_1 removed [ 243.676018][T13667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.696448][T13667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.722470][T13667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.747148][T13667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.792086][T13667] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 243.827282][ T7382] lo speed is unknown, defaulting to 1000 [ 243.850919][ T7382] syz2: Port: 1 Link DOWN [ 243.954365][T13694] netlink: 'syz.0.2147': attribute type 10 has an invalid length. [ 244.039158][T13694] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 244.842319][T13749] netlink: 272 bytes leftover after parsing attributes in process `syz.0.2156'. [ 244.890420][T13752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2157'. [ 244.991098][T13757] IPVS: set_ctl: invalid protocol: 59 172.20.20.38:20000 [ 245.090953][ T5288] veth1_vlan: left promiscuous mode [ 245.981216][T13797] IPv6: sit1: Disabled Multicast RS [ 245.992674][T13798] netlink: 'syz.3.2165': attribute type 11 has an invalid length. [ 246.014212][T13797] sit1: entered allmulticast mode [ 246.916922][T13848] ip6_vti0: left promiscuous mode [ 246.977355][T13871] netlink: 'syz.0.2181': attribute type 1 has an invalid length. [ 247.161267][T13848] bridge0: port 1(veth1_to_bridge) entered disabled state [ 247.196567][T13848] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 247.312913][T13877] netlink: 'syz.2.2183': attribute type 1 has an invalid length. [ 247.322601][T13877] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2183'. [ 247.336641][T13880] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2184'. [ 247.607699][ T166] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.626743][ T166] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.647499][T13900] SET target dimension over the limit! [ 247.913991][T13916] bond5: (slave ip6gretap1): making interface the new active one [ 247.938104][T13908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2195'. [ 247.962006][T13916] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 248.002084][T13908] bond5: entered allmulticast mode [ 248.020561][T13908] ip6gretap1: entered allmulticast mode [ 248.324303][T13931] x_tables: unsorted underflow at hook 3 [ 248.359112][T13931] xt_CT: You must specify a L4 protocol and not use inversions on it [ 248.492549][T13944] netlink: 'syz.3.2203': attribute type 12 has an invalid length. [ 248.533319][T13944] netlink: 'syz.3.2203': attribute type 29 has an invalid length. [ 248.550331][T13944] netlink: 'syz.3.2203': attribute type 7 has an invalid length. [ 248.585436][T13944] netlink: 'syz.3.2203': attribute type 39 has an invalid length. [ 248.602491][T13952] netlink: 'syz.0.2206': attribute type 7 has an invalid length. [ 248.656529][T13950] tipc: Started in network mode [ 248.671060][T13950] tipc: Node identity 080211000001, cluster identity 4711 [ 248.682149][T13950] tipc: Enabled bearer , priority 0 [ 248.710996][T13952] netlink: 'syz.0.2206': attribute type 7 has an invalid length. [ 248.857764][T13967] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 249.246256][T13991] netlink: 'syz.3.2215': attribute type 1 has an invalid length. [ 249.309582][T13991] bond8: entered promiscuous mode [ 249.315423][T13991] 8021q: adding VLAN 0 to HW filter on device bond8 [ 249.318413][T14001] netlink: 'syz.0.2218': attribute type 11 has an invalid length. [ 249.333494][T13991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2215'. [ 249.343027][T13991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2215'. [ 249.359315][T14001] netlink: 'syz.0.2218': attribute type 11 has an invalid length. [ 249.374134][T13991] bond8: (slave bridge7): making interface the new active one [ 249.382107][T13991] bridge7: entered promiscuous mode [ 249.389512][T13991] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 249.390207][T14001] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2218'. [ 249.454165][T14006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.474185][T14007] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2219'. [ 249.665232][T14020] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2222'. [ 249.708984][T14022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2223'. [ 249.726895][T14018] erspan0: left promiscuous mode [ 249.734202][T14022] netlink: 3804 bytes leftover after parsing attributes in process `syz.2.2223'. [ 249.763221][T14018] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.941112][T14018] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 249.997748][T14026] bond7: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 250.011647][T14026] bond7 (unregistering): Released all slaves [ 250.059417][ T7375] tipc: Node number set to 134418688 [ 250.234169][ T3325] bond2: (slave syz_tun): link status definitely down, disabling slave [ 250.979763][T14095] bridge8: entered promiscuous mode [ 250.986960][T14095] bridge8: entered allmulticast mode [ 251.052572][T14099] netlink: 'syz.0.2247': attribute type 5 has an invalid length. [ 251.086791][T14104] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 251.105312][T14104] syzkaller0: entered promiscuous mode [ 251.120858][T14104] syzkaller0: entered allmulticast mode [ 251.917294][T14156] netlink: 'syz.2.2260': attribute type 9 has an invalid length. [ 251.929983][T14153] netlink: 'syz.4.2259': attribute type 1 has an invalid length. [ 252.122125][T14174] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 252.229007][T14178] xt_CT: You must specify a L4 protocol and not use inversions on it [ 252.449542][T14195] xt_nat: multiple ranges no longer supported [ 252.566392][T14194] bond7: Unable to set down delay as MII monitoring is disabled [ 252.595798][T14194] bond7 (unregistering): Released all slaves [ 252.685062][T14213] __nla_validate_parse: 12 callbacks suppressed [ 252.685081][T14213] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2277'. [ 252.757410][T14210] xt_TPROXY: Can be used only with -p tcp or -p udp [ 252.765038][T14208] 8021q: adding VLAN 0 to HW filter on device bond12 [ 253.139025][T14238] macvtap0: entered allmulticast mode [ 253.147223][T14238] veth0_macvtap: entered allmulticast mode [ 253.164572][T14236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2285'. [ 253.181544][T14236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2285'. [ 253.207279][T14240] team0: Device ipvlan3 failed to register rx_handler [ 253.242802][T14243] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 253.398529][T14248] 8021q: adding VLAN 0 to HW filter on device bond6 [ 253.411291][T14247] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 253.449554][T14248] macvtap1: entered allmulticast mode [ 253.473639][T14247] macvtap2: entered allmulticast mode [ 253.592510][T14262] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2292'. [ 253.603782][T14260] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2292'. [ 253.825629][T14279] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2299'. [ 253.915922][T14288] validate_nla: 8 callbacks suppressed [ 253.915941][T14288] netlink: 'syz.2.2300': attribute type 5 has an invalid length. [ 254.099752][T14298] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2303'. [ 254.146796][T14298] syzkaller0: entered promiscuous mode [ 254.161763][T14298] syzkaller0: entered allmulticast mode [ 254.333747][T14303] netlink: 'syz.3.2304': attribute type 10 has an invalid length. [ 254.344955][T14280] netlink: 20800 bytes leftover after parsing attributes in process `syz.4.2298'. [ 254.380337][T14303] veth0_to_bond: left allmulticast mode [ 254.400853][T14303] veth0_to_bond: entered allmulticast mode [ 254.402130][T14305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.408582][T14286] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2298'. [ 254.454717][T14286] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2298'. [ 254.518890][T14317] netlink: 'syz.1.2307': attribute type 1 has an invalid length. [ 254.542834][T14317] netlink: 'syz.1.2307': attribute type 4 has an invalid length. [ 254.861375][T14334] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 255.436510][T14378] netlink: 'syz.3.2323': attribute type 11 has an invalid length. [ 255.526039][T14386] netlink: 'syz.2.2325': attribute type 2 has an invalid length. [ 255.605147][T14392] syzkaller0: entered promiscuous mode [ 255.612787][T14392] syzkaller0: entered allmulticast mode [ 255.672544][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.151655][T14430] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 256.212832][T14431] netlink: 'syz.4.2340': attribute type 1 has an invalid length. [ 256.421972][T14447] netlink: 'syz.0.2343': attribute type 1 has an invalid length. [ 256.477076][T14447] 8021q: adding VLAN 0 to HW filter on device bond7 [ 256.515520][T14452] bond0: (slave veth0_to_bond): Releasing backup interface [ 256.562234][T14452] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 256.991457][T14481] syzkaller0: entered promiscuous mode [ 257.015919][T14481] syzkaller0: entered allmulticast mode [ 257.095779][T14495] ipt_REJECT: TCP_RESET invalid for non-tcp [ 258.549202][T14555] veth0_macvtap: left allmulticast mode [ 258.759029][ T47] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 258.791095][ T47] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 258.816674][ T47] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 258.866415][ T47] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 258.908577][ T47] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 258.943031][ T47] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 259.069313][T14586] xt_hashlimit: size too large, truncated to 1048576 [ 259.159133][T14589] syzkaller0: entered promiscuous mode [ 259.189564][T14589] syzkaller0: entered allmulticast mode [ 259.223303][ T47] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 259.243578][ T47] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 259.261679][T14585] tun0: tun_chr_ioctl cmd 1074025675 [ 259.271940][T14585] tun0: persist disabled [ 259.499621][T14630] __nla_validate_parse: 13 callbacks suppressed [ 259.499640][T14630] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2382'. [ 259.526532][T14637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2380'. [ 259.775252][T14648] netlink: 'syz.2.2384': attribute type 30 has an invalid length. [ 260.025839][T14657] netlink: 'syz.3.2387': attribute type 27 has an invalid length. [ 260.035547][T14657] netlink: 'syz.3.2387': attribute type 4 has an invalid length. [ 260.043638][T14657] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2387'. [ 262.472460][T14689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2393'. [ 262.756587][T14714] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2397'. [ 262.934260][T14729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2397'. [ 265.083286][T14747] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2400'. [ 265.096182][T14749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2401'. [ 265.242025][T14758] netlink: 'syz.3.2402': attribute type 1 has an invalid length. [ 265.307264][T14766] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2402'. [ 265.339431][T14769] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2405'. [ 265.359960][T14768] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2407'. [ 265.669302][T14782] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2413'. [ 265.686095][T14782] 0ªî{X¹¦: renamed from gretap0 [ 265.686853][T14785] netlink: 524 bytes leftover after parsing attributes in process `syz.4.2414'. [ 265.718233][T14782] 0ªî{X¹¦: entered allmulticast mode [ 265.737144][T14790] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 265.749091][T14782] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 265.908369][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 265.933007][T14799] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2418'. [ 266.024674][T14803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2421'. [ 266.177226][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2424'. [ 266.246989][ T57] netdevsim netdevsim3 : set [0, 0] type 1 family 0 port 8472 - 0 [ 266.276500][ T57] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.311840][ T57] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.349484][ T57] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.274459][T14883] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20000 [ 267.284472][T14883] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20002 [ 267.503139][T14893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.597059][T14902] 8021q: adding VLAN 0 to HW filter on device bond8 [ 267.812186][T14913] bridge5: port 1(erspan0) entered blocking state [ 267.818865][T14913] bridge5: port 1(erspan0) entered forwarding state [ 267.900722][T14913] bond_slave_0: mtu greater than device maximum [ 267.917774][ T7381] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 267.945849][ T7381] syz0: Port: 1 Link ACTIVE [ 268.214837][T14934] netlink: 'syz.1.2455': attribute type 3 has an invalid length. [ 268.229733][T14919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.246543][T14919] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.271232][T14919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.378411][T14919] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 268.401344][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.408581][ T3325] bridge0: port 1(bridge_slave_0) entered listening state [ 268.448690][T14937] ip6gretap2: entered promiscuous mode [ 268.468917][T14937] ip6gretap2: entered allmulticast mode [ 268.580575][ T3325] bond2: (slave syz_tun): link status definitely up, 10000 Mbps full duplex [ 268.620354][ T3325] bond2: active interface up! [ 268.647619][T14944] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 268.678334][T14944] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 268.947180][T14980] netlink: 'syz.4.2468': attribute type 1 has an invalid length. [ 268.973059][T14980] netlink: 'syz.4.2468': attribute type 1 has an invalid length. [ 268.983712][T14980] netlink: 'syz.4.2468': attribute type 1 has an invalid length. [ 268.994079][T14979] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 269.001843][T14980] netlink: 'syz.4.2468': attribute type 2 has an invalid length. [ 269.620500][T15019] netlink: 'syz.3.2481': attribute type 10 has an invalid length. [ 269.647672][T15019] team0: Port device geneve1 added [ 269.749553][T15026] netlink: 'syz.3.2483': attribute type 7 has an invalid length. [ 269.758979][T15026] netlink: 'syz.3.2483': attribute type 8 has an invalid length. [ 269.767128][T15027] netlink: 'syz.3.2483': attribute type 7 has an invalid length. [ 269.877348][T15034] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 269.947274][T15039] 8021q: adding VLAN 0 to HW filter on device bond12 [ 270.073862][T15045] 8021q: adding VLAN 0 to HW filter on device bond11 [ 270.158737][T15055] __nla_validate_parse: 15 callbacks suppressed [ 270.158756][T15055] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2491'. [ 270.354850][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888075995000: rx timeout, send abort [ 270.364276][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888075995000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 270.444480][T15070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2495'. [ 270.546556][T15072] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2496'. [ 270.717818][T15083] blkio.reset_stats is deprecated [ 270.726709][T15083] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2499'. [ 270.984783][T15092] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2502'. [ 271.009128][T15092] validate_nla: 3 callbacks suppressed [ 271.009146][T15092] netlink: 'syz.3.2502': attribute type 21 has an invalid length. [ 271.045037][T15092] netlink: 'syz.3.2502': attribute type 1 has an invalid length. [ 271.117424][T15099] h: entered promiscuous mode [ 271.149872][T15099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2504'. [ 271.174996][T15099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2504'. [ 271.208224][T15099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2504'. [ 271.495531][T15119] netlink: 'syz.4.2510': attribute type 1 has an invalid length. [ 271.537769][T15119] netlink: 'syz.4.2510': attribute type 2 has an invalid length. [ 271.575897][T15120] netlink: 'syz.4.2510': attribute type 1 has an invalid length. [ 271.611525][T15120] netlink: 'syz.4.2510': attribute type 2 has an invalid length. [ 272.089082][T15162] lo speed is unknown, defaulting to 1000 [ 272.111992][T15163] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2523'. [ 272.121283][T15162] lo speed is unknown, defaulting to 1000 [ 272.180704][T15159] ±ÿª¨úrBº“: renamed from lo [ 272.189920][T15165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2524'. [ 272.209058][T15162] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 272.236983][T15162] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 272.287437][T15172] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 272.313777][T15162] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 272.370998][T15162] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 272.446465][T15162] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 272.572483][T15162] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 272.606871][T15162] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 272.643400][T15162] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 272.676468][T15162] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 272.705462][T15162] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 272.725304][T15192] team0: entered promiscuous mode [ 272.969662][T15207] netlink: 'syz.2.2534': attribute type 1 has an invalid length. [ 273.011673][T15206] openvswitch: netlink: IP tunnel dst address not specified [ 273.055542][T15207] bond7: entered promiscuous mode [ 273.065099][T15207] 8021q: adding VLAN 0 to HW filter on device bond7 [ 273.197386][T15214] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 273.262364][T15218] ieee802154 phy0 wpan0: encryption failed: -22 [ 273.438253][T15233] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:20002 [ 273.591435][T15239] syzkaller0: entered promiscuous mode [ 273.611598][T15239] syzkaller0: entered allmulticast mode [ 274.136042][T15258] netlink: 'syz.0.2549': attribute type 12 has an invalid length. [ 274.288722][T15275] vlan1: entered allmulticast mode [ 274.309794][T15275] bridge_slave_0: entered allmulticast mode [ 274.374405][T15265] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 275.110156][T15329] pim6reg: entered allmulticast mode [ 275.117136][T15333] netlink: 'syz.1.2568': attribute type 8 has an invalid length. [ 275.139554][T15329] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 275.196061][T15329] pim6reg: left allmulticast mode [ 275.720443][T15368] __nla_validate_parse: 9 callbacks suppressed [ 275.720462][T15368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2577'. [ 275.754300][T15368] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2577'. [ 275.821209][ T14] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.830725][T15368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2577'. [ 275.853892][ T14] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.867662][T15368] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2577'. [ 275.884622][ T14] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.907130][ T14] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.033826][T15388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2585'. [ 276.100086][T15388] bond8: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 276.118947][T15388] bond8 (unregistering): Released all slaves [ 276.148065][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 276.225487][T15401] siw: device registration error -23 [ 276.234821][T15402] siw: device registration error -23 [ 276.582143][T15423] netlink: 'syz.4.2594': attribute type 2 has an invalid length. [ 276.716393][T13509] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.726507][T13509] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.735249][T13509] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.744558][T13509] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.755985][T15436] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2597'. [ 276.874830][T15442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2600'. [ 276.940913][T15446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2601'. [ 277.026845][T15446] bond9: option xmit_hash_policy: invalid value (64) [ 277.037637][T15446] bond9 (unregistering): Released all slaves [ 277.267769][T15467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2606'. [ 277.287700][T15469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2609'. [ 277.314151][T15467] macsec1: entered promiscuous mode [ 277.320030][T15467] macsec1: entered allmulticast mode [ 277.325463][T15467] bridge0: entered allmulticast mode [ 277.334293][T15467] bridge0: port 1(macsec1) entered blocking state [ 277.342245][T15467] bridge0: port 1(macsec1) entered disabled state [ 277.355172][T15467] bridge0: left allmulticast mode [ 277.451458][T15470] vlan0: entered promiscuous mode [ 277.456635][T15470] hsr0: entered promiscuous mode [ 277.465358][T15470] vlan0: entered allmulticast mode [ 277.470856][T15470] hsr0: entered allmulticast mode [ 277.475997][T15470] hsr_slave_0: entered allmulticast mode [ 277.482278][T15470] hsr_slave_1: entered allmulticast mode [ 277.554180][T15470] netlink: 'syz.1.2607': attribute type 2 has an invalid length. [ 277.769572][T15491] batadv1: entered allmulticast mode [ 277.911834][T15515] bond13: entered promiscuous mode [ 277.919983][T15515] bond13: entered allmulticast mode [ 277.942828][T15516] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 277.997213][T15513] bridge0: entered allmulticast mode [ 278.048949][T15511] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 278.079245][T15511] lo speed is unknown, defaulting to 1000 [ 278.103992][T15511] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 278.206802][T15528] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 278.216689][T15527] x_tables: duplicate underflow at hook 1 [ 278.217030][T15529] gtp1: entered allmulticast mode [ 278.231244][T15529] team0: Device gtp1 is of different type [ 279.043839][T15586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.104999][T15591] netlink: 'syz.0.2643': attribute type 3 has an invalid length. [ 279.246146][T15599] 0·: renamed from hsr0 [ 279.259278][T15599] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 279.280392][T15599] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.295729][T15599] 0·: entered allmulticast mode [ 279.305003][T15599] hsr_slave_0: entered allmulticast mode [ 279.311640][T15599] hsr_slave_1: entered allmulticast mode [ 279.320412][T15599] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 279.336419][T15605] tipc: Enabling of bearer rejected, failed to enable media [ 279.350938][T15606] tipc: Enabling of bearer rejected, failed to enable media [ 279.788429][T15633] xt_cluster: node mask cannot exceed total number of nodes [ 279.814954][T15637] xt_cluster: node mask cannot exceed total number of nodes [ 280.142715][T15672] bond7: (slave veth0_to_bond): Releasing backup interface [ 280.316510][T15687] bridge0: port 2(bridge_slave_0) entered blocking state [ 280.345126][T15687] bridge0: port 2(bridge_slave_0) entered disabled state [ 280.355227][T15687] bridge_slave_0: entered allmulticast mode [ 280.369613][T15687] bridge_slave_0: entered promiscuous mode [ 280.605651][T15706] Bluetooth: MGMT ver 1.23 [ 280.750897][T15710] __nla_validate_parse: 20 callbacks suppressed [ 280.750914][T15710] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2676'. [ 280.801497][T15719] netlink: 'syz.1.2679': attribute type 62 has an invalid length. [ 280.809871][T15710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2676'. [ 280.836392][T15717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2676'. [ 280.943750][T15730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2683'. [ 281.024696][T15710] macvtap1: entered promiscuous mode [ 281.054194][T15710] vlan0: entered promiscuous mode [ 281.064263][T15710] macvtap1: entered allmulticast mode [ 281.071977][T15710] vlan0: entered allmulticast mode [ 281.077221][T15710] veth0_vlan: entered allmulticast mode [ 281.149547][T15717] macvtap2: entered promiscuous mode [ 281.158889][T15717] macvtap2: entered allmulticast mode [ 281.172607][T15737] syzkaller0: entered promiscuous mode [ 281.189309][T15737] syzkaller0: entered allmulticast mode [ 281.332490][T15752] syz_tun: entered allmulticast mode [ 281.338936][T15751] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2691'. [ 281.530332][T15766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2694'. [ 281.683064][T15771] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2696'. [ 281.832041][T15781] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2699'. [ 281.865032][T15781] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2699'. [ 281.910648][T15782] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 281.943252][T15743] syz_tun: left allmulticast mode [ 282.078333][T15796] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2703'. [ 282.437752][T15814] bond12 (unregistering): Released all slaves [ 282.505218][T15817] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 282.653718][T15830] netlink: 'syz.4.2712': attribute type 9 has an invalid length. [ 282.748128][T15834] bridge9: entered allmulticast mode [ 282.975485][T15853] netlink: 'syz.0.2718': attribute type 1 has an invalid length. [ 283.010929][T15863] syzkaller0: entered promiscuous mode [ 283.044942][T15863] syzkaller0: entered allmulticast mode [ 283.098518][T15850] simple: basic_1 [ 283.413469][T15891] netlink: 'syz.1.2727': attribute type 33 has an invalid length. [ 283.504145][T15891] bond14: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 283.559726][T15891] bond14 (unregistering): Released all slaves [ 283.828078][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 284.673376][T15980] syzkaller1: entered promiscuous mode [ 284.692621][T15980] syzkaller1: entered allmulticast mode [ 284.989641][T16002] bond0: entered promiscuous mode [ 285.000528][T16002] bond0: left promiscuous mode [ 285.050274][T16003] bond0: entered promiscuous mode [ 285.075223][T16003] bond0: left promiscuous mode [ 285.397816][T16025] netlink: 'syz.4.2765': attribute type 10 has an invalid length. [ 285.408913][T16025] netlink: 'syz.4.2765': attribute type 10 has an invalid length. [ 285.751453][T16039] bond8: option lp_interval: invalid value (0) [ 285.760894][T16051] netlink: 'syz.3.2770': attribute type 1 has an invalid length. [ 285.770530][T16039] bond8: option lp_interval: allowed values 1 - 2147483647 [ 285.788711][T16039] bond8 (unregistering): Released all slaves [ 285.853024][T16060] __nla_validate_parse: 13 callbacks suppressed [ 285.853101][T16060] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2772'. [ 285.890976][T16051] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 286.053091][T16069] netlink: 'syz.2.2774': attribute type 12 has an invalid length. [ 286.253925][T16080] syzkaller0: entered promiscuous mode [ 286.275712][T16080] syzkaller0: entered allmulticast mode [ 286.326476][T16088] netlink: 'syz.4.2781': attribute type 2 has an invalid length. [ 286.350670][T16088] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2781'. [ 286.875193][T16123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2787'. [ 286.946372][T16135] veth0_to_bond: entered allmulticast mode [ 287.085996][T16144] vxcan2: entered promiscuous mode [ 287.226340][T16155] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2796'. [ 287.497162][T16180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.540705][T16183] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2801'. [ 287.689091][T16191] netlink: 3080 bytes leftover after parsing attributes in process `syz.3.2807'. [ 287.723248][T16191] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.2807'. [ 287.751198][T16194] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 287.791348][T16202] netlink: 'syz.1.2808': attribute type 1 has an invalid length. [ 287.859656][T16205] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2809'. [ 287.877589][T16205] netlink: 'syz.2.2809': attribute type 2 has an invalid length. [ 287.902284][T16208] sctp: [Deprecated]: syz.0.2810 (pid 16208) Use of int in max_burst socket option deprecated. [ 287.902284][T16208] Use struct sctp_assoc_value instead [ 287.930002][T16208] openvswitch: netlink: IP tunnel dst address not specified [ 287.941802][T16211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2809'. [ 288.275902][T16232] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2814'. [ 288.388707][T16240] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20000 [ 289.325571][T16258] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 289.858571][T16299] mac80211_hwsim hwsim11 syzkaller0: Caught tx_queue_len zero misconfig [ 289.980023][T16303] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 290.243238][T16317] block nbd1: Unsupported socket: should be TCP or UNIX. [ 290.496198][T16341] netlink: 'syz.3.2842': attribute type 8 has an invalid length. [ 290.634869][T16350] netlink: 'syz.1.2846': attribute type 5 has an invalid length. [ 290.788717][T16344] syz.2.2844 (16344) used greatest stack depth: 18312 bytes left [ 290.944293][T16370] pimreg3: entered allmulticast mode [ 291.010556][T16377] xt_hashlimit: size too large, truncated to 1048576 [ 291.351897][T16393] tipc: Enabled bearer , priority 11 [ 291.385410][T16399] vlan0: entered promiscuous mode [ 291.556942][T16410] netlink: 'syz.1.2866': attribute type 10 has an invalid length. [ 291.593633][T16410] dummy0: entered promiscuous mode [ 291.604092][T16410] team0: Port device dummy0 added [ 291.621131][T16410] netlink: 'syz.1.2866': attribute type 10 has an invalid length. [ 291.637662][T16410] dummy0 (unregistering): left promiscuous mode [ 291.647031][T16410] team0: Port device dummy0 removed [ 291.657528][T16414] xt_TCPMSS: Only works on TCP SYN packets [ 291.665282][T16414] netlink: 'syz.4.2867': attribute type 23 has an invalid length. [ 291.696290][T16414] __nla_validate_parse: 28 callbacks suppressed [ 291.696310][T16414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2867'. [ 291.802766][T16419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2867'. [ 291.833536][T16420] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2868'. [ 291.946592][T16423] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 292.086549][T16436] syzkaller0: entered promiscuous mode [ 292.119648][T16436] syzkaller0: entered allmulticast mode [ 292.390273][T16448] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 292.391982][T16448] ieee802154 phy0 wpan0: encryption failed: -22 [ 292.474354][ T7381] tipc: Node number set to 117361749 [ 292.627429][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 292.648841][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 292.665011][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 292.673442][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 292.683046][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 292.721242][ T5636] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 292.732948][ T5636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 292.756174][ T5636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 292.772546][T16470] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2882'. [ 292.796460][ T5636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 292.808502][ T5636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 292.901412][T13509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.936776][T16479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2884'. [ 292.948298][T16479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2884'. [ 293.011893][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.102363][T16482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2886'. [ 293.332410][T16495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2890'. [ 293.535192][T16463] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 293.551907][T16463] lo speed is unknown, defaulting to 1000 [ 293.573813][T16463] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 293.588653][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.599174][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.609324][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.015317][T16530] netlink: 'syz.4.2899': attribute type 1 has an invalid length. [ 294.032553][T16530] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2899'. [ 294.056938][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.138531][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.158446][T16463] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.165743][T16463] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.173545][T16463] bridge_slave_0: entered allmulticast mode [ 294.182771][T16463] bridge_slave_0: entered promiscuous mode [ 294.191419][T16463] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.200179][T16463] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.200353][T16541] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 294.207493][T16463] bridge_slave_1: entered allmulticast mode [ 294.221653][T16463] bridge_slave_1: entered promiscuous mode [ 294.255392][T16541] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:0 [ 294.302730][T16463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.330865][T16463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.447233][T16553] netlink: 'syz.2.2906': attribute type 1 has an invalid length. [ 294.448976][T16463] team0: Port device team_slave_0 added [ 294.560870][T16553] bond8: entered promiscuous mode [ 294.566522][T16553] 8021q: adding VLAN 0 to HW filter on device bond8 [ 294.576967][T16463] team0: Port device team_slave_1 added [ 294.606086][T16559] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2909'. [ 294.663903][T16553] bond8: (slave bridge8): making interface the new active one [ 294.672942][T16553] bridge8: entered promiscuous mode [ 294.680026][T16553] bond8: (slave bridge8): Enslaving as an active interface with an up link [ 294.716542][T16562] veth0: entered promiscuous mode [ 294.787144][T16463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.814743][T16463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.842710][T16463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.857158][T16558] veth0: left promiscuous mode [ 294.865961][T16463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.869308][ T50] Bluetooth: hci5: command tx timeout [ 294.908985][T16463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.936301][T16463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.073896][T16463] hsr_slave_0: entered promiscuous mode [ 295.082350][T16463] hsr_slave_1: entered promiscuous mode [ 295.111720][T16581] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 295.187240][T16590] x_tables: duplicate underflow at hook 2 [ 295.193425][ T3354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.214548][T16589] x_tables: duplicate underflow at hook 2 [ 295.245100][T16589] netlink: 'syz.4.2917': attribute type 1 has an invalid length. [ 295.261319][T16589] netlink: 'syz.4.2917': attribute type 11 has an invalid length. [ 295.278480][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.289187][ T3354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.313207][T16590] netlink: 'syz.4.2917': attribute type 7 has an invalid length. [ 295.328635][T16590] netlink: 'syz.4.2917': attribute type 8 has an invalid length. [ 295.592843][T16625] netlink: 'syz.2.2925': attribute type 14 has an invalid length. [ 295.609340][T16625] netlink: 'syz.2.2925': attribute type 13 has an invalid length. [ 295.625051][T16619] gtp0: entered promiscuous mode [ 295.631448][T16619] gtp0: entered allmulticast mode [ 295.672539][T16630] netlink: 'syz.1.2926': attribute type 18 has an invalid length. [ 295.894419][T16463] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.912138][T16463] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.055742][T16632] team1: entered promiscuous mode [ 296.068057][T16632] team1: entered allmulticast mode [ 296.202610][T16463] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.214572][T16463] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.371889][T16463] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.387231][T16463] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.588507][T16682] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 296.596217][T16682] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 296.701129][T16687] bridge_slave_0: left allmulticast mode [ 296.711190][T16687] bridge_slave_0: left promiscuous mode [ 296.719208][T16687] bridge0: port 2(bridge_slave_0) entered disabled state [ 296.732789][T16687] veth1_to_bridge: left allmulticast mode [ 296.738879][T16687] veth1_to_bridge: left promiscuous mode [ 296.744839][T16687] bridge0: port 1(veth1_to_bridge) entered disabled state [ 296.948921][ T50] Bluetooth: hci5: command tx timeout [ 297.085023][T16463] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 297.149321][T16463] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 297.167279][T16707] ip6erspan1: entered allmulticast mode [ 297.173526][T16463] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 297.219518][T16463] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 297.229552][T16463] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 297.245014][T16463] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 297.292418][T16463] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 297.307795][T16463] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 297.384870][T16725] __nla_validate_parse: 13 callbacks suppressed [ 297.384888][T16725] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2951'. [ 297.482837][T16725] bond5: left allmulticast mode [ 297.489006][T16725] ip6gretap1: left allmulticast mode [ 297.495564][T16732] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2953'. [ 297.499100][T16725] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2951'. [ 297.665577][T16463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.749588][T16463] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.773244][T16750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2957'. [ 297.800609][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.807809][ T3325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.824262][T16753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2958'. [ 297.849380][T16749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2958'. [ 297.854621][T16753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2958'. [ 297.885064][T16753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2958'. [ 297.897514][T16753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2958'. [ 297.911908][T16753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2958'. [ 297.946658][T16759] bridge11: port 1(erspan0) entered blocking state [ 297.975424][T16759] bridge11: port 1(erspan0) entered disabled state [ 297.985242][T16759] erspan0: entered allmulticast mode [ 297.994545][T16759] erspan0: entered promiscuous mode [ 298.001270][T16759] bridge11: port 1(erspan0) entered blocking state [ 298.007944][T16759] bridge11: port 1(erspan0) entered forwarding state [ 298.031742][T16756] vlan4: entered allmulticast mode [ 298.037105][T16756] bridge11: entered allmulticast mode [ 298.047302][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.054490][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.341569][T16780] netlink: 'syz.2.2964': attribute type 61 has an invalid length. [ 298.539690][ T3354] net_ratelimit: 10 callbacks suppressed [ 298.539708][ T3354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.663314][T16788] syzkaller0: entered promiscuous mode [ 298.668908][T16788] syzkaller0: entered allmulticast mode [ 298.669082][ T3325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.027137][T16813] sctp: [Deprecated]: syz.3.2973 (pid 16813) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.027137][T16813] Use struct sctp_sack_info instead [ 299.054726][ T50] Bluetooth: hci5: command tx timeout [ 299.190878][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.198206][ C1] bridge0: topology change detected, propagating [ 299.716760][ T1013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.808145][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.388456][ T1013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.470060][ T3354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.842204][ T1013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.933192][T13509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.081199][T16463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.111101][ T50] Bluetooth: hci5: command tx timeout [ 301.220560][T16463] veth0_vlan: entered promiscuous mode [ 301.237060][T16463] veth1_vlan: entered promiscuous mode [ 301.285653][T16822] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 301.294079][T16822] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 301.390873][T16463] veth0_macvtap: entered promiscuous mode [ 301.436124][T16463] veth1_macvtap: entered promiscuous mode [ 301.510537][T16463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.560386][T16463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.628569][ T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.661051][ T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.719940][ T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.747013][ T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.829964][T16853] netlink: 'syz.3.2986': attribute type 10 has an invalid length. [ 301.842494][T16856] netlink: 'syz.4.2983': attribute type 1 has an invalid length. [ 301.912919][T16853] dummy0: entered allmulticast mode [ 301.941156][T16862] netlink: 'syz.1.2988': attribute type 1 has an invalid length. [ 301.974857][T16856] 8021q: adding VLAN 0 to HW filter on device bond15 [ 302.006815][T16849] bond15: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 302.060562][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.071423][T16860] syzkaller0: entered promiscuous mode [ 302.077450][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.092583][T16860] syzkaller0: entered allmulticast mode [ 302.192483][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.223343][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.326691][T16869] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 302.944093][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.956250][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.978573][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.989509][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 303.000896][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 303.182454][T16924] netlink: 'syz.1.3005': attribute type 1 has an invalid length. [ 303.193563][T16924] __nla_validate_parse: 5 callbacks suppressed [ 303.193580][T16924] netlink: 16179 bytes leftover after parsing attributes in process `syz.1.3005'. [ 303.228583][T16924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.252589][T16922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3003'. [ 303.359826][T16932] sctp: [Deprecated]: syz.4.3004 (pid 16932) Use of struct sctp_assoc_value in delayed_ack socket option. [ 303.359826][T16932] Use struct sctp_sack_info instead [ 303.508633][ T5623] bond2: (slave syz_tun): Removing an active aggregator [ 303.521290][ T5623] bond2: (slave syz_tun): Releasing backup interface [ 303.532346][T16941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3008'. [ 303.582941][T16941] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.640939][T16942] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.822670][T16963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3012'. [ 303.879869][ T3354] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.929283][ T3354] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.949529][ T3354] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 304.002714][T16974] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3013'. [ 304.084368][T16913] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 304.125406][T16913] lo speed is unknown, defaulting to 1000 [ 304.137776][T16913] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 304.271547][ T3354] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.290568][ T3354] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.294097][T16988] netlink: 'syz.1.3018': attribute type 4 has an invalid length. [ 304.307539][ T3354] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 304.574373][T17001] netlink: 'syz.0.3020': attribute type 39 has an invalid length. [ 304.576174][ T3354] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.593107][ T3354] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.604414][ T3354] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 304.754701][T17005] syzkaller0: entered promiscuous mode [ 304.767640][T17005] syzkaller0: entered allmulticast mode [ 304.811611][ T3354] netdevsim netdevsim3  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.821538][ T3354] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.831467][ T3354] netdevsim netdevsim3  (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 305.112796][ T50] Bluetooth: hci1: command tx timeout [ 307.142320][T17019] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 307.191708][ T50] Bluetooth: hci1: command tx timeout [ 307.246025][T17022] netlink: 'syz.4.3024': attribute type 2 has an invalid length. [ 307.352873][T17030] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3025'. [ 307.823957][ T3354] bridge_slave_0: left allmulticast mode [ 307.827540][T17056] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 307.851278][ T3354] bridge_slave_0: left promiscuous mode [ 307.877385][ T3354] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.971630][T17062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3035'. [ 308.035783][ T3354] erspan0: left allmulticast mode [ 308.045385][ T3354] erspan0: left promiscuous mode [ 308.074569][ T3354] bridge11: port 1(erspan0) entered disabled state [ 308.140386][ T3354] tipc: Resetting bearer [ 308.145958][T17072] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3038'. [ 308.267310][T17082] nbd: must specify a device to reconfigure [ 308.397567][T17088] netlink: 'syz.4.3042': attribute type 5 has an invalid length. [ 308.541473][ T3354] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 308.600871][ T3354] tipc: Disabling bearer [ 308.685890][ T3354] bond7 (unregistering): (slave geneve3): Releasing active interface [ 308.706639][ T3354] bond4 (unregistering): (slave geneve2): Releasing active interface [ 308.721423][ T3354] team0: Port device geneve1 removed [ 308.778401][ T3354] bond8 (unregistering): (slave bridge7): Releasing backup interface [ 308.786643][ T3354] bridge7 (unregistering): left promiscuous mode [ 308.842916][ T3354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.859515][ T3354] bond_slave_0: left allmulticast mode [ 308.866859][ T3354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.876628][ T3354] bond_slave_1: left allmulticast mode [ 308.883458][ T3354] bond0 (unregistering): Released all slaves [ 308.894311][ T3354] bond1 (unregistering): Released all slaves [ 308.907921][ T3354] bond2 (unregistering): Released all slaves [ 308.921670][ T3354] bond3 (unregistering): Released all slaves [ 308.936410][ T3354] bond4 (unregistering): Released all slaves [ 308.955957][ T3354] bond5 (unregistering): Released all slaves [ 309.005297][ T3354] bond6 (unregistering): Released all slaves [ 309.030198][ T3354] bond7 (unregistering): Released all slaves [ 309.048645][ T3354] bond8 (unregistering): Released all slaves [ 309.065624][ T3354] bond9 (unregistering): Released all slaves [ 309.089086][ T3354] bond10 (unregistering): Released all slaves [ 309.104354][ T3354] bond11 (unregistering): Released all slaves [ 309.126969][T17058] bridge0: entered promiscuous mode [ 309.132484][T17058] bridge0: entered allmulticast mode [ 309.214906][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 309.268777][ T50] Bluetooth: hci1: command tx timeout [ 309.447019][T17109] netlink: 'syz.4.3046': attribute type 11 has an invalid length. [ 309.482558][T17109] netlink: 4320 bytes leftover after parsing attributes in process `syz.4.3046'. [ 309.504228][ T3354] tipc: Left network mode [ 309.539253][T17112] netlink: 'syz.0.3047': attribute type 18 has an invalid length. [ 309.574962][T17109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3046'. [ 309.586825][ T166] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.600883][T17112] netlink: 'syz.0.3047': attribute type 18 has an invalid length. [ 309.611478][T16913] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.620152][T16913] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.628507][T16913] bridge_slave_0: entered allmulticast mode [ 309.637687][T16913] bridge_slave_0: entered promiscuous mode [ 309.671800][ T166] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.704700][T16913] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.728950][T16913] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.752877][T16913] bridge_slave_1: entered allmulticast mode [ 309.774333][T16913] bridge_slave_1: entered promiscuous mode [ 309.811732][T17121] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3048'. [ 309.861870][T17126] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3048'. [ 309.889911][ T166] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.958213][ T166] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.063443][T16913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.292672][T16913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.343036][T17143] netlink: 'syz.1.3052': attribute type 7 has an invalid length. [ 310.352843][T17143] netlink: 'syz.1.3052': attribute type 8 has an invalid length. [ 310.483071][T17153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3054'. [ 310.522741][T17153] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3054'. [ 310.577232][T17159] netlink: 'syz.0.3056': attribute type 1 has an invalid length. [ 310.806334][T17166] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3055'. [ 310.887571][T16913] team0: Port device team_slave_0 added [ 310.919374][T16913] team0: Port device team_slave_1 added [ 311.027438][T17182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3060'. [ 311.075767][T17184] netlink: 'syz.1.3061': attribute type 1 has an invalid length. [ 311.101941][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 311.122101][T16913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.129414][T17184] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3061'. [ 311.158009][T16913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.214870][T16913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.235954][T17186] gretap0: entered promiscuous mode [ 311.252962][T17189] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 311.271363][T17189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3064'. [ 311.283163][T16913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.307782][T16913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.349255][ T50] Bluetooth: hci1: command tx timeout [ 311.355296][T16913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.502319][ T3354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.515674][ T3354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.684736][ T3354] vlan0: left allmulticast mode [ 311.689971][ T3354] veth0_vlan: left allmulticast mode [ 311.695486][ T3354] vlan0: left promiscuous mode [ 311.701372][ T3354] veth1_macvtap: left allmulticast mode [ 311.707040][ T3354] veth0_macvtap: left allmulticast mode [ 311.713192][ T3354] veth0_macvtap: left promiscuous mode [ 311.721028][ T3354] veth1_vlan: left promiscuous mode [ 311.726393][ T3354] veth0_vlan: left promiscuous mode [ 312.982569][ T3354] team0 (unregistering): Port device team_slave_1 removed [ 313.004736][ T3354] team0 (unregistering): Port device team_slave_0 removed [ 313.152463][T17213] bond0: option miimon: invalid value (18446744071829782528) [ 313.161477][T17213] bond0: option miimon: allowed values 0 - 2147483647 [ 313.171047][T17219] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 313.276987][T16913] hsr_slave_0: entered promiscuous mode [ 313.298055][T16913] hsr_slave_1: entered promiscuous mode [ 313.304777][T16913] debugfs: 'hsr0' already exists in 'hsr' [ 313.311487][T16913] Cannot create hsr debugfs directory [ 313.395685][T17236] netlink: 'syz.0.3076': attribute type 1 has an invalid length. [ 313.434399][T17228] 8021q: adding VLAN 0 to HW filter on device bond17 [ 313.494714][T17226] macvlan2: entered promiscuous mode [ 313.505921][T17226] macvlan2: entered allmulticast mode [ 313.516354][T17226] bond17: entered promiscuous mode [ 313.537484][T17226] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 313.577292][T17226] bond17: left promiscuous mode [ 314.224895][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 314.315277][ T3354] IPVS: stop unused estimator thread 0... [ 314.315791][T17286] tipc: Enabling of bearer rejected, already enabled [ 314.536823][T17295] syzkaller1: entered promiscuous mode [ 314.542594][T17295] syzkaller1: entered allmulticast mode [ 314.559688][T17286] tipc: Resetting bearer [ 314.724479][T17314] xt_TCPMSS: Only works on TCP SYN packets [ 314.920223][T17329] xt_hashlimit: size too large, truncated to 1048576 [ 315.401467][T17350] __nla_validate_parse: 9 callbacks suppressed [ 315.401486][T17350] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3095'. [ 315.459868][T17353] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3095'. [ 315.674506][T16913] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 315.704535][T16913] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 315.722547][T16913] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 315.760178][T16913] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 315.793376][T16913] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 315.816328][T16913] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 315.838295][T16913] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 315.864174][T16913] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 315.884783][T17364] gre0: left promiscuous mode [ 315.916231][T17364] team0: left promiscuous mode [ 315.923136][T17364] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.986893][T17364] bond8: left promiscuous mode [ 316.019487][ T5729] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 316.093273][T17364] h: left promiscuous mode [ 316.102140][T17364] vlan0: left promiscuous mode [ 316.107102][T17364] hsr0: left promiscuous mode [ 316.118985][T17364] bond13: left promiscuous mode [ 316.124346][T17364] 8021q: adding VLAN 0 to HW filter on device bond13 [ 316.269288][ T3325] ip6_tunnel:  xmit: Local address not yet configured! [ 316.320444][ T3325] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 316.382504][ T3325] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 316.475733][T17411] netlink: 'syz.1.3110': attribute type 1 has an invalid length. [ 316.508945][ T7384] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 316.520140][T17411] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 316.696206][T16913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.824160][T16913] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.861713][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.868961][ T3325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.933068][T17430] 8021q: VLANs not supported on gre0 [ 316.943485][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.952262][ T3325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.113371][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.238941][T17450] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3119'. [ 317.836574][T17482] netlink: 'syz.4.3123': attribute type 4 has an invalid length. [ 317.880984][T17487] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3124'. [ 317.902823][T17495] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3126'. [ 317.916137][T17487] veth0: entered promiscuous mode [ 317.924140][T17486] veth0: left promiscuous mode [ 318.200761][T17513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3129'. [ 318.225478][T17513] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3129'. [ 318.275461][T17517] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.3129'. [ 318.280661][T17506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3127'. [ 318.296387][T16913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.379408][T17506] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3127'. [ 318.464334][T16913] veth0_vlan: entered promiscuous mode [ 318.556546][T16913] veth1_vlan: entered promiscuous mode [ 318.647388][T16913] veth0_macvtap: entered promiscuous mode [ 318.680687][T16913] veth1_macvtap: entered promiscuous mode [ 318.762210][T16913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.783754][T16913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.813797][ T3325] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.842272][ T3325] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.875888][ T3325] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.900945][ T3325] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.131029][ T166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.163983][ T166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.257338][ T3325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.274178][ T3325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.873764][ T5636] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 319.898520][ T5636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 319.908725][ T5636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 319.911356][T17589] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 319.944210][ T5636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 319.957738][ T5636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 320.468276][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 320.476080][T17609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3151'. [ 320.548023][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 320.665771][T17609] hsr_slave_1 (unregistering): left promiscuous mode [ 320.708238][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 321.101515][ T47] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.361548][T17647] syzkaller1: entered allmulticast mode [ 321.386660][T17585] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 321.405526][T17585] lo speed is unknown, defaulting to 1000 [ 321.429695][ T47] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.453965][T17647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3160'. [ 321.503989][T17585] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 321.552214][T17664] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3164'. [ 321.571689][T17664] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3164'. [ 321.614797][ T47] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.714784][T17664] gretap0: entered promiscuous mode [ 321.725316][T17664] gretap0: left promiscuous mode [ 321.786863][T17670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.893196][ T47] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.008937][T17689] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 322.058911][T17691] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 322.077000][ T50] Bluetooth: hci0: command tx timeout [ 322.420693][T17719] netlink: 'syz.4.3174': attribute type 10 has an invalid length. [ 322.621820][T17726] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3177'. [ 322.782905][T17730] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 322.902214][T17731] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3178'. [ 322.971519][ T47] pimreg: left allmulticast mode [ 323.008859][ T47] pimreg3: left allmulticast mode [ 323.306533][T17756] netlink: 'syz.0.3180': attribute type 83 has an invalid length. [ 323.361052][ T47] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 323.372790][T17759] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3182'. [ 323.911815][ T47] bond2 (unregistering): (slave geneve2): Releasing active interface [ 323.937529][ T47] team0: Port device geneve1 removed [ 324.027661][ T47] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 324.037787][ T47] bridge4 (unregistering): left promiscuous mode [ 324.144043][ T47] bond8 (unregistering): (slave bridge8): Releasing backup interface [ 324.153077][ T50] Bluetooth: hci0: command tx timeout [ 324.170422][ T47] bridge8 (unregistering): left promiscuous mode [ 324.354205][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.392833][ T47] bond0 (unregistering): Released all slaves [ 324.416198][ T47] bond1 (unregistering): Released all slaves [ 324.440374][ T47] bond2 (unregistering): Released all slaves [ 324.463170][ T47] bond3 (unregistering): Released all slaves [ 324.493413][ T47] bond4 (unregistering): Released all slaves [ 324.516126][ T47] bond5 (unregistering): Released all slaves [ 324.553041][ T47] bond6 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 324.565743][ T47] bond6 (unregistering): Released all slaves [ 324.579941][ T47] bond7 (unregistering): Released all slaves [ 324.593560][ T47] bond8 (unregistering): Released all slaves [ 324.705074][T17781] tunl0: entered promiscuous mode [ 324.723016][T17781] netlink: 'syz.1.3183': attribute type 3 has an invalid length. [ 324.736733][T17781] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3183'. [ 324.748796][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 324.935765][ T47] : left promiscuous mode [ 325.025241][T17817] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3187'. [ 325.038869][T17819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3190'. [ 325.117797][T17819] x_tables: duplicate underflow at hook 1 [ 325.171632][T17819] ieee802154 phy0 wpan0: encryption failed: -22 [ 325.331677][T17585] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.342057][T17585] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.359607][T17585] bridge_slave_0: entered allmulticast mode [ 325.378858][T17585] bridge_slave_0: entered promiscuous mode [ 325.484183][T17837] netlink: 'syz.4.3193': attribute type 3 has an invalid length. [ 325.500011][T17585] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.517451][T17585] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.543435][T17585] bridge_slave_1: entered allmulticast mode [ 325.563925][T17585] bridge_slave_1: entered promiscuous mode [ 325.634444][T17849] __nla_validate_parse: 1 callbacks suppressed [ 325.634460][T17849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3195'. [ 325.816482][T17585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.910865][T17585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.017376][T17863] mac80211_hwsim hwsim11 ÿ: renamed from wlan1 [ 326.133557][ T7377] IPVS: starting estimator thread 0... [ 326.229179][ T50] Bluetooth: hci0: command tx timeout [ 326.250911][T17879] IPVS: using max 38 ests per chain, 91200 per kthread [ 326.316732][T17585] team0: Port device team_slave_0 added [ 326.432677][T17585] team0: Port device team_slave_1 added [ 326.476389][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 326.515950][ T47] hsr_slave_0: left promiscuous mode [ 326.532089][ T47] hsr_slave_1: left promiscuous mode [ 326.724008][T17911] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 326.743506][T17911] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3205'. [ 326.781856][T17915] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3210'. [ 326.800618][T17915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3210'. [ 326.811763][T17915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3210'. [ 327.002819][T17925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3211'. [ 327.119482][ T47] team0 (unregistering): Port device team_slave_1 removed [ 327.134503][ T47] team0 (unregistering): Port device team_slave_0 removed [ 327.251745][T17891] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3204'. [ 327.254531][ T1013] smbdirect: ib_dev[syú2] removed [ 327.362879][T17905] syzkaller0: entered promiscuous mode [ 327.368592][T17905] syzkaller0: entered allmulticast mode [ 327.383159][T17925] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3211'. [ 327.415525][T17924] bond16: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 327.427369][T17924] bond16 (unregistering): Released all slaves [ 327.454306][T17585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.462504][T17585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.489194][T17585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.503126][T17936] Bluetooth: MGMT ver 1.23 [ 327.505470][T17585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.515567][T17585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.541882][T17585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.314677][ T50] Bluetooth: hci0: command tx timeout [ 329.270828][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 329.278861][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 329.286061][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 329.901132][T17585] hsr_slave_0: entered promiscuous mode [ 329.939557][T17585] hsr_slave_1: entered promiscuous mode [ 329.976012][T17585] debugfs: 'hsr0' already exists in 'hsr' [ 329.995471][T17585] Cannot create hsr debugfs directory [ 330.051685][T17948] netlink: 'syz.4.3217': attribute type 33 has an invalid length. [ 330.099122][T17951] syz_tun: refused to change device tx_queue_len [ 330.149728][T17946] netlink: 'syz.0.3215': attribute type 4 has an invalid length. [ 330.202794][T17942] syzkaller0: entered promiscuous mode [ 330.209472][T17942] syzkaller0: entered allmulticast mode [ 330.244293][T17948] bond18: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 330.260474][T17948] bond18 (unregistering): Released all slaves [ 330.458399][ T47] IPVS: stop unused estimator thread 0... [ 330.596481][T17973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3221'. [ 330.710096][T17973] bond18: entered promiscuous mode [ 330.715670][T17973] 8021q: adding VLAN 0 to HW filter on device bond18 [ 330.805345][T17984] netlink: 'syz.1.3225': attribute type 142 has an invalid length. [ 330.847047][T17976] bridge11: entered promiscuous mode [ 330.857697][T17976] bond18: (slave bridge11): Enslaving as an active interface with an up link [ 330.932768][T17982] bond0: (slave bond_slave_0): Releasing backup interface [ 331.066812][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 331.086797][T17993] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 331.099281][T17992] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3228'. [ 331.122363][T17999] netlink: 'syz.0.3229': attribute type 1 has an invalid length. [ 331.138361][T17999] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3229'. [ 331.321946][T18000] vcan0: entered promiscuous mode [ 331.327061][T18000] vcan0: entered allmulticast mode [ 331.503748][T18018] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3233'. [ 331.650493][T18019] syzkaller0: entered promiscuous mode [ 331.656143][T18019] syzkaller0: entered allmulticast mode [ 332.305567][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807bff5c00: rx timeout, send abort [ 332.314791][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807bff5c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 333.755473][T18025] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 333.886942][T18040] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3237'. [ 333.966860][T18046] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.3239'. [ 334.336027][T18067] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3244'. [ 334.627169][T17585] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 334.665516][T17585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 334.686559][T17585] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 334.713825][T18086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3248'. [ 334.742376][T17585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 334.767194][T17585] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 334.815016][T17585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 334.841265][T17585] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 334.863682][T17585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 335.286545][T18117] pim6reg1: entered promiscuous mode [ 335.306046][T18117] pim6reg1: entered allmulticast mode [ 335.324524][T18119] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 335.345117][T18119] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 335.373964][T17585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.486558][T17585] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.511821][T13509] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.519032][T13509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.607113][T12134] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.614330][T12134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.652691][T18142] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3261'. [ 335.661638][T18138] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 335.661701][T18138] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 335.734941][T18145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3262'. [ 335.805592][T18148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3263'. [ 335.812489][T17585] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 335.825660][T17585] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 336.781680][T18207] __nla_validate_parse: 4 callbacks suppressed [ 336.781699][T18207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3273'. [ 336.801073][T18206] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3272'. [ 336.813050][T18206] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3272'. [ 337.063785][T17585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.103794][T18224] xt_SECMARK: invalid mode: 9 [ 337.302970][T17585] veth0_vlan: entered promiscuous mode [ 337.340940][T17585] veth1_vlan: entered promiscuous mode [ 337.416673][T17585] veth0_macvtap: entered promiscuous mode [ 337.449228][T17585] veth1_macvtap: entered promiscuous mode [ 337.463058][T18248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3283'. [ 337.507181][T17585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.570521][T17585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.638977][ T1013] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.674079][ T1013] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.694902][ T1013] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.711481][ T1013] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.723947][T18261] ip6_vti0: entered promiscuous mode [ 337.742362][T18261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3286'. [ 337.772326][T18260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3286'. [ 337.889905][T18264] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.036496][T18272] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3289'. [ 338.054233][ T3354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.081069][ T3354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.174604][ T3354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.192789][ T3354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.624458][T18304] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 338.626474][T18302] geneve2: entered promiscuous mode [ 338.669222][T18304] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 338.695566][T18310] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3300'. [ 339.200794][ T5636] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 339.215401][ T5636] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 339.236513][ T5636] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 339.250949][ T5636] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 339.264813][ T5636] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.510267][T18348] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 339.586413][T18319] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 340.284625][T18336] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 340.296494][T18336] lo speed is unknown, defaulting to 1000 [ 340.597761][T18361] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 340.964598][T18336] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.971949][T18336] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.980504][T18336] bridge_slave_0: entered allmulticast mode [ 340.989021][T18336] bridge_slave_0: entered promiscuous mode [ 340.997646][T18336] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.005352][T18336] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.012941][T18336] bridge_slave_1: entered allmulticast mode [ 341.021075][T18336] bridge_slave_1: entered promiscuous mode [ 341.052708][T18439] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3321'. [ 341.109480][T18336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.131035][T18442] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3321'. [ 341.161849][T18336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.348301][ T50] Bluetooth: hci3: command tx timeout [ 341.392617][T18336] team0: Port device team_slave_0 added [ 341.401914][T18336] team0: Port device team_slave_1 added [ 341.450373][T18336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.457443][T18336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.518227][T18336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.551217][T18336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.583148][T18336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.659634][T18336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.800357][T18486] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.3330'. [ 341.835209][T18483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3328'. [ 341.843969][T18336] hsr_slave_0: entered promiscuous mode [ 341.862303][T18336] hsr_slave_1: entered promiscuous mode [ 341.883640][T18336] debugfs: 'hsr0' already exists in 'hsr' [ 341.892046][T18336] Cannot create hsr debugfs directory [ 341.970277][T18488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3331'. [ 341.996798][T18488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3331'. [ 342.022436][T18488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3331'. [ 342.283818][T18488] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 342.347529][T18488] bond1 (unregistering): Released all slaves [ 342.373213][T18517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3331'. [ 342.523345][T18524] xfrm1: entered allmulticast mode [ 342.693475][T18535] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3339'. [ 342.751876][T18535] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3339'. [ 342.962378][T18336] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.986162][T18336] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.997058][T18336] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 343.022987][T18336] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 343.055318][T18535] geneve2: entered promiscuous mode [ 343.172551][T18336] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.194142][T18566] netlink: 'syz.2.3344': attribute type 6 has an invalid length. [ 343.207323][T18336] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.240924][T18336] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 343.264603][T18336] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 343.334606][T18577] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3345'. [ 343.430251][ T50] Bluetooth: hci3: command tx timeout [ 343.546895][T18336] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.561087][T18336] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.574779][T18336] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 343.586766][T18336] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 343.821243][T18336] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.854735][T18336] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.879018][T18336] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 343.898504][T18336] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 343.982077][T18612] netlink: 'syz.0.3352': attribute type 10 has an invalid length. [ 344.045231][T18584] syzkaller0: entered promiscuous mode [ 344.051507][T18584] syzkaller0: entered allmulticast mode [ 344.079444][T18612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.108746][T18612] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 344.166513][T18611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.187661][T18611] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 344.199663][T18611] bond0 (unregistering): Released all slaves [ 344.344524][T18628] netlink: 'syz.0.3356': attribute type 1 has an invalid length. [ 345.157712][T18635] SET target dimension over the limit! [ 345.163690][T18635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3358'. [ 345.508716][ T50] Bluetooth: hci3: command tx timeout [ 345.908047][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 345.915366][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 346.549040][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 346.738836][T18628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.792332][T18629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.809216][T18629] bond0: (slave gre1): The slave device specified does not support setting the MAC address [ 346.848563][T18629] bond0: (slave gre1): Error -95 calling set_mac_address [ 346.904592][T18630] gretap1: entered promiscuous mode [ 346.907045][T18653] netlink: 'syz.3.3363': attribute type 83 has an invalid length. [ 346.919924][T18630] bond0: (slave gretap1): making interface the new active one [ 346.934300][T18630] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 346.957424][T18631] macvlan2: entered promiscuous mode [ 346.967751][T18631] macvlan2: entered allmulticast mode [ 346.988273][T18631] bond0: entered promiscuous mode [ 346.999922][T18631] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 347.016798][T18631] bond0: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 347.036296][T18631] bond0: left promiscuous mode [ 347.044004][T18657] netlink: 'syz.3.3365': attribute type 1 has an invalid length. [ 347.146604][T18657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 347.230506][T18667] __nla_validate_parse: 1 callbacks suppressed [ 347.230524][T18667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3367'. [ 347.255795][T18662] bond1: (slave gretap1): making interface the new active one [ 347.296792][T18662] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 347.588005][ T50] Bluetooth: hci3: command tx timeout [ 347.632058][T18336] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 347.678630][T18336] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 347.713754][T18336] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 347.746466][T18336] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 347.780462][T18336] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 347.807185][T18336] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 347.837700][T18336] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 347.864469][T18336] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 347.953870][T18703] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 348.036184][T18711] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3380'. [ 348.203322][T18723] netlink: 'syz.3.3382': attribute type 1 has an invalid length. [ 348.254030][T18336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.304407][T18723] bridge5: entered promiscuous mode [ 348.318732][T18723] bridge5: entered allmulticast mode [ 348.351597][T18722] netlink: 'syz.2.3383': attribute type 1 has an invalid length. [ 348.372900][T18336] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.461301][T13509] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.468808][T13509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.519771][T13509] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.527035][T13509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.546768][T18747] openvswitch: netlink: Message has 12 unknown bytes. [ 348.565547][T18748] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 348.593038][T18747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.613890][T18755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3389'. [ 348.668221][T18755] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3389'. [ 349.012226][T18779] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3397'. [ 349.134574][T18784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3398'. [ 349.304658][T18796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3402'. [ 349.510528][T18804] syzkaller1: entered promiscuous mode [ 349.524260][T18804] syzkaller1: entered allmulticast mode [ 349.583667][T18336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.592214][T18808] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3406'. [ 349.608178][T18808] nbd: must specify a device to reconfigure [ 349.661318][T18336] veth0_vlan: entered promiscuous mode [ 349.684600][T18336] veth1_vlan: entered promiscuous mode [ 349.735104][T18336] veth0_macvtap: entered promiscuous mode [ 349.764623][T18336] veth1_macvtap: entered promiscuous mode [ 349.813754][T18336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.865364][T18336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.895232][T18820] netlink: 'syz.3.3411': attribute type 1 has an invalid length. [ 349.905613][T18822] netlink: 'syz.2.3412': attribute type 1 has an invalid length. [ 349.926772][ T153] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.972644][T18822] 8021q: adding VLAN 0 to HW filter on device bond2 [ 349.993540][ T153] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.002912][ T153] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.043133][T18824] bond2: (slave veth3): Enslaving as an active interface with a down link [ 350.052911][ T153] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.197471][T13509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.217184][T13509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.246937][T18829] openvswitch: netlink: Missing key (keys=40, expected=100) [ 350.311630][T18836] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 350.323504][T18836] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 350.482053][T18848] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 350.492281][T18828] nbd1: detected capacity change from 0 to 63 [ 350.514425][ T50] block nbd1: Receive control failed (result -104) [ 350.515988][ T5636] block nbd1: Receive control failed (result -32) [ 350.591063][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.621267][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.647307][T18851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3421'. [ 350.725075][T18855] netlink: 'syz.0.3423': attribute type 2 has an invalid length. [ 350.737391][T18855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3423'. [ 350.950769][ T5780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.961016][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.193803][ T5636] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 351.204322][ T5636] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 351.227159][ T5636] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 351.240660][ T5636] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 351.268946][ T5636] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 351.287806][ T50] [ 351.290178][ T50] ====================================================== [ 351.297196][ T50] WARNING: possible circular locking dependency detected [ 351.304219][ T50] syzkaller #0 Not tainted [ 351.308618][ T50] ------------------------------------------------------ [ 351.315701][ T50] kworker/u9:0/50 is trying to acquire lock: [ 351.321661][ T50] ffff88801be9d210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 351.332100][ T50] [ 351.332100][ T50] but task is already holding lock: [ 351.339453][ T50] ffff88801be9d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 351.348855][ T50] [ 351.348855][ T50] which lock already depends on the new lock. [ 351.348855][ T50] [ 351.359259][ T50] [ 351.359259][ T50] the existing dependency chain (in reverse order) is: [ 351.368257][ T50] [ 351.368257][ T50] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 351.376265][ T50] down_write+0x96/0x200 [ 351.381033][ T50] kernfs_add_one+0x41/0x5e0 [ 351.386147][ T50] kernfs_create_dir_ns+0x1a1/0x230 [ 351.391851][ T50] internal_create_group+0x440/0x1180 [ 351.397729][ T50] cpuhp_invoke_callback+0x434/0x810 [ 351.403518][ T50] cpuhp_issue_call+0x3f0/0x750 [ 351.408883][ T50] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 351.415463][ T50] __cpuhp_setup_state+0x3f/0x60 [ 351.420911][ T50] do_one_initcall+0x250/0x870 [ 351.426199][ T50] do_initcall_level+0x10a/0x1a0 [ 351.431667][ T50] do_initcalls+0x59/0xa0 [ 351.436518][ T50] kernel_init_freeable+0x29d/0x3e0 [ 351.442237][ T50] kernel_init+0x1d/0x1d0 [ 351.447078][ T50] ret_from_fork+0x514/0xb70 [ 351.452180][ T50] ret_from_fork_asm+0x1a/0x30 [ 351.457452][ T50] [ 351.457452][ T50] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 351.465341][ T50] [ 351.465341][ T50] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 351.473054][ T50] cpus_read_lock+0x42/0x160 [ 351.478171][ T50] static_key_slow_inc+0x12/0x30 [ 351.483634][ T50] nbd_genl_reconfigure+0x1301/0x1e80 [ 351.489526][ T50] genl_family_rcv_msg_doit+0x233/0x340 [ 351.495600][ T50] genl_rcv_msg+0x614/0x7a0 [ 351.500622][ T50] netlink_rcv_skb+0x226/0x4a0 [ 351.505898][ T50] genl_rcv+0x28/0x40 [ 351.510391][ T50] netlink_unicast+0x7bb/0x940 [ 351.515658][ T50] netlink_sendmsg+0x813/0xb40 [ 351.520927][ T50] sock_sendmsg_nosec+0x13a/0x180 [ 351.526463][ T50] ____sys_sendmsg+0x54e/0x850 [ 351.531734][ T50] ___sys_sendmsg+0x2a5/0x360 [ 351.536924][ T50] __x64_sys_sendmsg+0x1b1/0x290 [ 351.542388][ T50] do_syscall_64+0x174/0x580 [ 351.547483][ T50] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.553892][ T50] [ 351.553892][ T50] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 351.561537][ T50] __mutex_lock+0x19d/0x1550 [ 351.566651][ T50] nbd_queue_rq+0x373/0x1150 [ 351.571761][ T50] blk_mq_dispatch_rq_list+0x499/0x1990 [ 351.577826][ T50] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 351.584675][ T50] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 351.591170][ T50] blk_mq_run_work_fn+0x16c/0x300 [ 351.596704][ T50] process_scheduled_works+0xa8e/0x14e0 [ 351.602787][ T50] worker_thread+0xa47/0xfb0 [ 351.607888][ T50] kthread+0x388/0x470 [ 351.612462][ T50] ret_from_fork+0x514/0xb70 [ 351.617557][ T50] ret_from_fork_asm+0x1a/0x30 [ 351.622834][ T50] [ 351.622834][ T50] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 351.630061][ T50] __mutex_lock+0x19d/0x1550 [ 351.635186][ T50] nbd_queue_rq+0xc1/0x1150 [ 351.640204][ T50] blk_mq_dispatch_rq_list+0x499/0x1990 [ 351.646274][ T50] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 351.653112][ T50] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 351.659601][ T50] blk_mq_run_work_fn+0x16c/0x300 [ 351.665134][ T50] process_scheduled_works+0xa8e/0x14e0 [ 351.671189][ T50] worker_thread+0xa47/0xfb0 [ 351.676293][ T50] kthread+0x388/0x470 [ 351.680874][ T50] ret_from_fork+0x514/0xb70 [ 351.685981][ T50] ret_from_fork_asm+0x1a/0x30 [ 351.691262][ T50] [ 351.691262][ T50] -> #4 (set->srcu){.+.+}-{0:0}: [ 351.698376][ T50] __synchronize_srcu+0xc9/0x2f0 [ 351.703822][ T50] elevator_switch+0x1e8/0x7b0 [ 351.709187][ T50] elevator_change+0x2fa/0x480 [ 351.714551][ T50] elevator_set_default+0x375/0x440 [ 351.720373][ T50] blk_register_queue+0x3f3/0x4e0 [ 351.725904][ T50] __add_disk+0x6cb/0xe30 [ 351.730746][ T50] add_disk_fwnode+0xfb/0x4b0 [ 351.735934][ T50] nbd_dev_add+0x733/0xb60 [ 351.740858][ T50] nbd_init+0x15f/0x1e0 [ 351.745524][ T50] do_one_initcall+0x250/0x870 [ 351.750793][ T50] do_initcall_level+0x10a/0x1a0 [ 351.756236][ T50] do_initcalls+0x59/0xa0 [ 351.761086][ T50] kernel_init_freeable+0x29d/0x3e0 [ 351.766788][ T50] kernel_init+0x1d/0x1d0 [ 351.771627][ T50] ret_from_fork+0x514/0xb70 [ 351.776810][ T50] ret_from_fork_asm+0x1a/0x30 [ 351.782090][ T50] [ 351.782090][ T50] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 351.789912][ T50] __mutex_lock+0x19d/0x1550 [ 351.795013][ T50] elevator_change+0x1af/0x480 [ 351.800288][ T50] elevator_set_none+0xb5/0x140 [ 351.805666][ T50] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 351.811977][ T50] nbd_start_device+0x189/0xb30 [ 351.817337][ T50] nbd_genl_connect+0x1597/0x1c10 [ 351.822879][ T50] genl_family_rcv_msg_doit+0x233/0x340 [ 351.828973][ T50] genl_rcv_msg+0x614/0x7a0 [ 351.833991][ T50] netlink_rcv_skb+0x226/0x4a0 [ 351.839266][ T50] genl_rcv+0x28/0x40 [ 351.843755][ T50] netlink_unicast+0x7bb/0x940 [ 351.849025][ T50] netlink_sendmsg+0x813/0xb40 [ 351.854295][ T50] sock_sendmsg_nosec+0x13a/0x180 [ 351.859828][ T50] ____sys_sendmsg+0x54e/0x850 [ 351.865095][ T50] ___sys_sendmsg+0x2a5/0x360 [ 351.870287][ T50] __x64_sys_sendmsg+0x1b1/0x290 [ 351.875737][ T50] do_syscall_64+0x174/0x580 [ 351.880840][ T50] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.887243][ T50] [ 351.887243][ T50] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 351.895841][ T50] blk_alloc_queue+0x544/0x690 [ 351.901119][ T50] __blk_mq_alloc_disk+0x194/0x390 [ 351.906735][ T50] nbd_dev_add+0x494/0xb60 [ 351.911659][ T50] nbd_init+0x15f/0x1e0 [ 351.916341][ T50] do_one_initcall+0x250/0x870 [ 351.921640][ T50] do_initcall_level+0x10a/0x1a0 [ 351.927099][ T50] do_initcalls+0x59/0xa0 [ 351.931938][ T50] kernel_init_freeable+0x29d/0x3e0 [ 351.937649][ T50] kernel_init+0x1d/0x1d0 [ 351.942484][ T50] ret_from_fork+0x514/0xb70 [ 351.947583][ T50] ret_from_fork_asm+0x1a/0x30 [ 351.952852][ T50] [ 351.952852][ T50] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 351.960054][ T50] fs_reclaim_acquire+0x71/0x100 [ 351.965499][ T50] kmem_cache_alloc_noprof+0x64/0x5f0 [ 351.971378][ T50] __kernfs_iattrs+0xdd/0x380 [ 351.976555][ T50] kernfs_iop_setattr+0xe6/0x3f0 [ 351.982003][ T50] notify_change+0xbba/0xea0 [ 351.987103][ T50] do_truncate+0x1c2/0x250 [ 351.992028][ T50] path_openat+0x2fed/0x3830 [ 351.997124][ T50] do_file_open+0x23e/0x4a0 [ 352.002134][ T50] do_sys_openat2+0x115/0x200 [ 352.007314][ T50] __x64_sys_openat+0x138/0x170 [ 352.012664][ T50] do_syscall_64+0x174/0x580 [ 352.017757][ T50] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.024152][ T50] [ 352.024152][ T50] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 352.032653][ T50] __lock_acquire+0x1520/0x2cf0 [ 352.038015][ T50] lock_acquire+0x106/0x350 [ 352.043019][ T50] down_write+0x96/0x200 [ 352.047789][ T50] kernfs_link_sibling+0x4c7/0x5a0 [ 352.053409][ T50] kernfs_add_one+0x1d2/0x5e0 [ 352.058589][ T50] kernfs_create_dir_ns+0x1a1/0x230 [ 352.064379][ T50] sysfs_create_dir_ns+0x12f/0x2a0 [ 352.069999][ T50] kobject_add_internal+0x622/0xcd0 [ 352.075702][ T50] kobject_add+0x163/0x240 [ 352.080627][ T50] device_add+0x3fa/0xb80 [ 352.085467][ T50] hci_conn_add_sysfs+0xd5/0x210 [ 352.090921][ T50] hci_conn_complete_evt+0x8a8/0x1350 [ 352.096797][ T50] hci_event_packet+0x6cd/0xf10 [ 352.102159][ T50] hci_rx_work+0x3ee/0x1020 [ 352.107171][ T50] process_scheduled_works+0xa8e/0x14e0 [ 352.113245][ T50] worker_thread+0xa47/0xfb0 [ 352.118347][ T50] kthread+0x388/0x470 [ 352.122920][ T50] ret_from_fork+0x514/0xb70 [ 352.128016][ T50] ret_from_fork_asm+0x1a/0x30 [ 352.133299][ T50] [ 352.133299][ T50] other info that might help us debug this: [ 352.133299][ T50] [ 352.143509][ T50] Chain exists of: [ 352.143509][ T50] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 352.143509][ T50] [ 352.158017][ T50] Possible unsafe locking scenario: [ 352.158017][ T50] [ 352.165457][ T50] CPU0 CPU1 [ 352.170808][ T50] ---- ---- [ 352.176155][ T50] lock(&root->kernfs_rwsem); [ 352.180910][ T50] lock(cpuhp_state_mutex); [ 352.188008][ T50] lock(&root->kernfs_rwsem); [ 352.195276][ T50] lock(&root->kernfs_iattr_rwsem); [ 352.200551][ T50] [ 352.200551][ T50] *** DEADLOCK *** [ 352.200551][ T50] [ 352.208677][ T50] 4 locks held by kworker/u9:0/50: [ 352.213784][ T50] #0: ffff888053351140 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 352.224750][ T50] #1: ffffc90000ba7c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 352.236834][ T50] #2: ffff88807f4e80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350 [ 352.246753][ T50] #3: ffff88801be9d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 352.256584][ T50] [ 352.256584][ T50] stack backtrace: [ 352.262558][ T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 352.262578][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 352.262589][ T50] Workqueue: hci4 hci_rx_work [ 352.262623][ T50] Call Trace: [ 352.262631][ T50] [ 352.262639][ T50] dump_stack_lvl+0xe8/0x150 [ 352.262658][ T50] print_circular_bug+0x2e1/0x300 [ 352.262679][ T50] check_noncircular+0x12e/0x150 [ 352.262698][ T50] __lock_acquire+0x1520/0x2cf0 [ 352.262716][ T50] ? __lock_acquire+0x683/0x2cf0 [ 352.262734][ T50] ? kernfs_link_sibling+0x4c7/0x5a0 [ 352.262749][ T50] lock_acquire+0x106/0x350 [ 352.262763][ T50] ? kernfs_link_sibling+0x4c7/0x5a0 [ 352.262782][ T50] down_write+0x96/0x200 [ 352.262798][ T50] ? kernfs_link_sibling+0x4c7/0x5a0 [ 352.262812][ T50] ? __pfx_down_write+0x10/0x10 [ 352.262825][ T50] ? kernfs_root+0x1c/0x230 [ 352.262839][ T50] ? kernfs_root+0x1c/0x230 [ 352.262851][ T50] ? kernfs_root+0x1c/0x230 [ 352.262865][ T50] ? kernfs_root+0x1ea/0x230 [ 352.262879][ T50] kernfs_link_sibling+0x4c7/0x5a0 [ 352.262897][ T50] kernfs_add_one+0x1d2/0x5e0 [ 352.262914][ T50] kernfs_create_dir_ns+0x1a1/0x230 [ 352.262931][ T50] sysfs_create_dir_ns+0x12f/0x2a0 [ 352.262954][ T50] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 352.262978][ T50] ? do_raw_spin_unlock+0xf5/0x210 [ 352.262998][ T50] kobject_add_internal+0x622/0xcd0 [ 352.263018][ T50] kobject_add+0x163/0x240 [ 352.263034][ T50] ? __pfx_kobject_add+0x10/0x10 [ 352.263051][ T50] ? get_device_parent+0x366/0x3a0 [ 352.263070][ T50] device_add+0x3fa/0xb80 [ 352.263086][ T50] hci_conn_add_sysfs+0xd5/0x210 [ 352.263109][ T50] hci_conn_complete_evt+0x8a8/0x1350 [ 352.263125][ T50] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 352.263149][ T50] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 352.263164][ T50] ? skb_pull_data+0xf0/0x200 [ 352.263183][ T50] hci_event_packet+0x6cd/0xf10 [ 352.263198][ T50] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 352.263212][ T50] ? __pfx_hci_event_packet+0x10/0x10 [ 352.263228][ T50] ? audit_trim_trees+0x280/0x7e0 [ 352.263248][ T50] ? hci_send_to_monitor+0xe2/0x590 [ 352.263267][ T50] hci_rx_work+0x3ee/0x1020 [ 352.263284][ T50] ? process_scheduled_works+0xa20/0x14e0 [ 352.263304][ T50] process_scheduled_works+0xa8e/0x14e0 [ 352.263334][ T50] ? __pfx_process_scheduled_works+0x10/0x10 [ 352.263355][ T50] ? assign_work+0x3cf/0x5d0 [ 352.263375][ T50] worker_thread+0xa47/0xfb0 [ 352.263404][ T50] kthread+0x388/0x470 [ 352.263418][ T50] ? __pfx_worker_thread+0x10/0x10 [ 352.263437][ T50] ? __pfx_kthread+0x10/0x10 [ 352.263452][ T50] ret_from_fork+0x514/0xb70 [ 352.263468][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 352.263489][ T50] ? __switch_to+0xc89/0x1420 [ 352.263510][ T50] ? __pfx_kthread+0x10/0x10 [ 352.263525][ T50] ret_from_fork_asm+0x1a/0x30 [ 352.263547][ T50] [ 352.551892][ T7382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.560175][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 352.611492][T18882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3433'. [ 352.696558][T12134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.704867][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.111487][ T57] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.196294][ T57] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.287159][ T57] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.379836][ T57] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.458864][ T57] erspan0: left allmulticast mode [ 353.463956][ T57] erspan0: left promiscuous mode [ 353.470638][ T57] bridge5: port 1(erspan0) entered disabled state [ 353.492110][ T57] pim6reg: left allmulticast mode [ 353.526436][ T57] bond5 (unregistering): (slave ip6gre1): Releasing backup interface [ 353.535106][ T57] ip6gre1 (unregistering): left promiscuous mode [ 353.589626][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.597764][ T7389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.605957][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.614077][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.637019][ T57] bond3 (unregistering): (slave geneve2): Releasing active interface [ 353.672722][ T57] bond7 (unregistering): (slave bridge3): Releasing backup interface [ 353.681422][ T57] bridge3 (unregistering): left promiscuous mode [ 353.694372][ T57] bond10 (unregistering): (slave bridge6): Releasing active interface [ 353.702639][ T57] bridge6 (unregistering): left promiscuous mode [ 353.709617][ T57] bridge6 (unregistering): left allmulticast mode [ 353.725089][ T57] bond18 (unregistering): (slave bridge11): Releasing backup interface [ 353.734401][ T57] bridge11 (unregistering): left promiscuous mode [ 353.744793][ T57] D (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.754025][ T57] D (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.763003][ T57] D (unregistering): Released all slaves [ 353.771636][ T57] bond1 (unregistering): Released all slaves [ 353.780524][ T57] bond2 (unregistering): Released all slaves [ 353.790874][ T57]  (unregistering): Released all slaves [ 353.803009][ T57] bond3 (unregistering): Released all slaves [ 353.814607][ T57] bond4 (unregistering): Released all slaves [ 353.825363][ T57] bond5 (unregistering): Released all slaves [ 353.835235][ T57] bond6 (unregistering): Released all slaves [ 353.844279][ T57] bond7 (unregistering): Released all slaves [ 353.853602][ T57] bond8 (unregistering): Released all slaves [ 353.870460][ T57] bond0 (unregistering): Released all slaves [ 353.882855][ T57] bond9 (unregistering): Released all slaves [ 353.895768][ T57] bond10 (unregistering): Released all slaves [ 353.904816][ T57] bond11 (unregistering): Released all slaves [ 353.919344][ T57] bond12 (unregistering): Released all slaves [ 353.928375][ T57] bond13 (unregistering): Released all slaves [ 353.937430][ T57] bond14 (unregistering): Released all slaves [ 353.952872][ T57] bond15 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 353.962738][ T57] bond15 (unregistering): Released all slaves [ 353.971639][ T57] bond16 (unregistering): Released all slaves [ 353.982159][ T57] bond17 (unregistering): Released all slaves [ 353.991670][ T57] bond18 (unregistering): Released all slaves [ 354.110005][ T57] tipc: Disabling bearer [ 354.115936][ T57] tipc: Left network mode [ 354.160652][ T57] IPVS: stopping backup sync thread 8452 ... [ 354.316597][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 354.415633][ T57] hsr_slave_0: left promiscuous mode [ 354.421527][ T57] hsr_slave_1: left promiscuous mode [ 354.629972][ T7389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.638386][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.708557][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 354.714170][T13509] smbdirect: ib_dev[syz0] removed [ 354.715115][ T5359] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 354.727344][ T5359] infiniband syz0: ib_query_port failed (-19) [ 354.905060][ T57] IPVS: stop unused estimator thread 0... [ 354.976403][ T57] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.014441][ T57] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.030314][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 355.086419][ T57] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.137316][ T57] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.248169][ T57] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.284317][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 355.308743][ T57] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.352852][ T57] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.404824][ T57] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.522272][ T57] bridge_slave_1: left allmulticast mode [ 355.530176][ T57] bridge_slave_1: left promiscuous mode [ 355.536264][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.545012][ T57] bridge_slave_0: left allmulticast mode [ 355.553629][ T57] bridge_slave_0: left promiscuous mode [ 355.559868][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.572522][ T57] bridge_slave_1: left allmulticast mode [ 355.578228][ T57] bridge_slave_1: left promiscuous mode [ 355.583981][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.593397][ T57] bridge_slave_0: left allmulticast mode [ 355.599267][ T57] bridge_slave_0: left promiscuous mode [ 355.604965][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.675643][ T7382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.684306][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.722752][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.733160][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.743090][ T57] bond0 (unregistering): Released all slaves [ 355.793590][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.803995][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.821299][ T57] bond0 (unregistering): Released all slaves [ 355.830993][ T57] bond1 (unregistering): Released all slaves [ 355.843153][ T57] bond2 (unregistering): (slave veth3): Releasing active interface [ 355.852321][ T57] bond2 (unregistering): Released all slaves [ 356.217788][ T57] hsr_slave_0: left promiscuous mode [ 356.224006][ T57] hsr_slave_1: left promiscuous mode [ 356.230487][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.238476][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.246355][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.257275][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.267740][ T57] hsr_slave_0: left promiscuous mode [ 356.274007][ T57] hsr_slave_1: left promiscuous mode [ 356.280323][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.288637][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.296426][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.304034][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.315523][ T57] veth1_macvtap: left promiscuous mode [ 356.321246][ T57] veth0_macvtap: left promiscuous mode [ 356.326744][ T57] veth1_vlan: left promiscuous mode [ 356.332036][ T57] veth0_vlan: left promiscuous mode [ 356.338096][ T57] veth1_macvtap: left promiscuous mode [ 356.343577][ T57] veth0_macvtap: left promiscuous mode [ 356.349560][ T57] veth1_vlan: left promiscuous mode [ 356.354789][ T57] veth0_vlan: left promiscuous mode [ 356.463319][ T57] team0 (unregistering): Port device team_slave_1 removed [ 356.486779][ T57] team0 (unregistering): Port device team_slave_0 removed [ 356.571107][ T57] team0 (unregistering): Port device team_slave_1 removed [ 356.582441][ T57] team0 (unregistering): Port device team_slave_0 removed [ 356.628219][ T5359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.636444][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.953313][ T5288] 8021q: adding VLAN 0 to HW filter on device eth6 [ 357.184600][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5 [ 357.366101][ T5288] 8021q: adding VLAN 0 to HW filter on device eth8 [ 357.561726][ T5288] 8021q: adding VLAN 0 to HW filter on device eth7 [ 357.756285][ T5288] 8021q: adding VLAN 0 to HW filter on device eth9 [ 357.945018][ T5288] 8021q: adding VLAN 0 to HW filter on device eth10 [ 358.137069][ T5288] 8021q: adding VLAN 0 to HW filter on device eth11 [ 358.327561][ T5288] 8021q: adding VLAN 0 to HW filter on device eth12 [ 358.789444][ T5729] net_ratelimit: 6 callbacks suppressed [ 358.789533][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.803369][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.668047][ T3108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.676320][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.829964][ T5780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.838236][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.869837][ T7389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.878129][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog