last executing test programs: 6.112594074s ago: executing program 2 (id=3304): r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, &(0x7f00000006c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x42013, 0x2020e}}, 0x20}, 0x1, 0x0, 0x0, 0x20000886}, 0x0) 5.662990941s ago: executing program 2 (id=3309): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x33c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x288, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0x11, 0x8, 0x4}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x4000000, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x26, 0xffff, 0x8, 0x2, 0x2, 0x8, 0x2}}, {0x57, 0x2, [0x6, 0x6]}}, {{0x1c, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3, 0x1}}, {0x6, 0x2, [0x5fd]}}, {{0x1c, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088, 0x4}}, {0xc, 0x2, [0x4, 0xffff, 0xff52, 0x9]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0x10, 0x2}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x44}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5.608707813s ago: executing program 2 (id=3312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 5.418762989s ago: executing program 2 (id=3314): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}]}}}]}, 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) connect$inet6(r5, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r5, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f0000000540)="bd", 0x1}], 0x2}}], 0x1, 0x4400c040) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) sendto$inet6(r5, &(0x7f0000000200)="b6e9a119ab73e8bc554543900284a75b2abb4c01593a", 0x16, 0x3b00, 0x0, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x6, 0x6, 0xa, 0xffffffffffffffe0, 0x4}], &(0x7f0000000140)='syzkaller\x00', 0x25, 0xbd, &(0x7f0000000180)=""/189, 0x41100, 0x27, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000240)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xa, 0x1, 0xb4}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)=[r0, r0, r1, 0xffffffffffffffff, r0], 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@ifindex, 0x26, 0x1, 0x101, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r9, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@map=r0, r7, 0xf, 0x8, 0x0, @void, @value=r9, @void, @void, r8}, 0x20) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f00000010c0)="2ae2", 0x2}], 0x1, 0x1) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r11 = accept4(r10, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r11) splice(r0, 0x0, r11, 0x0, 0x10000000000066, 0xa) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3) 4.942745972s ago: executing program 2 (id=3318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f00000002c0)) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r4) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000200000000050037005000000008000200", @ANYRES64=r6], 0x50}, 0x4, 0x700000000000000, 0x0, 0x4}, 0x4040084) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r8, 0x204, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x50}, 0x1, 0x0, 0x0, 0x40088c0}, 0x8890) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r5, 0x109, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x938948d94d344c7d}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES64=r4, @ANYRESHEX=r2, @ANYRES32=r2, @ANYRESDEC=r2, @ANYRES64=r5, @ANYRES8=r5, @ANYRES64=0x0, @ANYRES32=r5, @ANYRESHEX=0x0], 0x64}}, 0x4044800) 4.723178874s ago: executing program 2 (id=3322): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000100010200000000000000000200000508000840000004"], 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000029000000040000002b0110"], 0x28}, 0x4004004) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff080004400000008108001840000000032000018006000340000200001400018008000100ac1414aa08000200ffffffff0800044000000056b1d50b1d04075c000a8008000140000000015000028014000180080001007f00000108000200640101000c000280050001002f0000002c0001801400030020", @ANYRES64=r1, @ANYRESDEC], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="02", 0x1}], 0x1, &(0x7f0000000040)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x0, 0x8, 0x0, 0xa73f, 0xd7, 0x7, 0x7f, r5}}], 0x30, 0x4002000}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000040)={r5, 0x9899}, 0x8) 1.994950323s ago: executing program 1 (id=3349): syz_emit_ethernet(0xf7, &(0x7f0000001fc0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4a3ff2", 0xc1, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x14}, {"d77010bccc638e41d335ff361ce886173572c1c6089e36cd551c13256174146b9ec3297ed6f7e4e855a2a473476a1f8f7842a7b9d5baa28f23d342e9d4c3ca479f46646411f3ae97c5c20a618be50ed5efa2acc9ffa20881cdb562d8d2afc05cc12d32916de708b279c53a377fb7e598643430e476a62642336ec479540ecc7239330f6ca802f72bd956c845bff0ad0116e6c290ba25c4833c826f5d1b2f16151638e676e08ef63a200e503f04"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x31, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1b}, 0xa1) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000037c00000400c2800c0001800600060086dd"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.899651707s ago: executing program 3 (id=3350): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000400000000000000000c00078008000640000000070500010007000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x58}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x44}, 0x1, 0x0, 0x0, 0x24048044}, 0x44000) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c000780"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) (async) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x1, 0x1}}}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0xffff}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x404401d}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706", 0x11}], 0x1}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d000100756470"], 0x54}}, 0x0) r15 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14, 0x81800) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x4, 0x10000, 0x32, @mcast1, @mcast2, 0x80, 0x7, 0xfa9, 0x6}}) sendto$packet(r15, &(0x7f0000000100)="26389294d9d2540fb182cc3df4d6f534526d691a9f19ba31ff788999a8ccf7cb", 0x20, 0x30, &(0x7f0000000280)={0x11, 0x18, r16, 0x1, 0x5, 0x6, @remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001000ffff26bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100380a0400ac00128009000100766c616e000000009c000280060001000400000004000380400004800c000100080000002b4a00000c000100fc0fabb2400000000c00010003001400040000000c00010066000000800000000c000100080000000e0000004c0003800c00010000000000530a00000c00010006000000ff0f00000c00010000000080ff0f00000c00010000000000050000000c00010006000000000000000c000100fbffffff2103000008000500", @ANYRES32=r17], 0xd4}}, 0x8000002) 1.727278925s ago: executing program 4 (id=3351): r0 = socket$key(0xf, 0x3, 0x2) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x11, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_nat_t_type={0x1}]}, 0x88}, 0x1, 0x7}, 0x0) 1.726648825s ago: executing program 0 (id=3352): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x15, 0x6, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) (async, rerun: 32) recvmmsg$unix(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000000)=""/118, 0x68}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0xe8}], 0x7, 0x0, 0xfffffffffffffd43}}], 0x4000000000000b2, 0x40, 0x0) (async, rerun: 32) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async, rerun: 64) socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x3, 0x7fff, 0x8, 0xffff, 0x202000, 0xe, 0x2, 0xff, 0x0}, &(0x7f0000000180)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0x8254, 0x4, 0x7, 0x6ba8, r1}, &(0x7f0000000200)=0x10) (async) socket$nl_route(0x10, 0x3, 0x0) 1.678368149s ago: executing program 1 (id=3353): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000a40)={0x14, 0x56, 0x601, 0x0, 0x0, "", [@generic="f4"]}, 0x14}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000019c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x40) unshare(0x14000400) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3a, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xc}}) 1.514284845s ago: executing program 4 (id=3354): r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x10000, @mcast2, 0xfffffff8}}, 0x3475b718, 0x5, 0x6, 0x6, 0x1, 0x2, 0x2}, 0x9c) setsockopt$sock_attach_bpf(r0, 0x1, 0x49, &(0x7f0000000040), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x4}, [@nested={0xc, 0x1a, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x42805}, 0x84) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000140)={0x7, 'vxcan1\x00', {0x6}, 0x800}) socket$inet_tcp(0x2, 0x1, 0x0) (async) pipe(&(0x7f0000000000)) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x10000, @mcast2, 0xfffffff8}}, 0x3475b718, 0x5, 0x6, 0x6, 0x1, 0x2, 0x2}, 0x9c) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x49, &(0x7f0000000040), 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x4}, [@nested={0xc, 0x1a, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x42805}, 0x84) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000140)={0x7, 'vxcan1\x00', {0x6}, 0x800}) (async) 1.438845785s ago: executing program 0 (id=3355): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async, rerun: 64) recvmmsg$unix(r3, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x400122a0, 0x0) (rerun: 64) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)=""/219, 0xdb}], 0x1}, 0x40000000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x400c805}, 0x20000090) (async) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000410007012cbd7000fadbdf25037c00000401cb80100001800c00108008000b8004"], 0x28}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00004c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) (async, rerun: 32) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = gettid() sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="400400008400020008001b0000000000080004000300000008001300", @ANYRES32=r8, @ANYBLOB="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"], 0x360}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) (async, rerun: 64) sendto$packet(r0, &(0x7f0000000640)="e8b7", 0x2, 0x40, &(0x7f0000000200)={0x11, 0xf8, r2, 0x1, 0x0, 0x6, @remote}, 0x14) (async, rerun: 64) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, 0x3, 0x7, 0x635899322ee9dc1, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6f24}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10001}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x115f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7324}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x800}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008010}, 0x80) 1.437950627s ago: executing program 1 (id=3356): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, r1, 0x4, 0x0, @val=@tracing={0x0, 0x1}}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800110000000000000000000000ca6c9500000000000000ffdb360734076d08000d0ba8897489c522ba66c5439753d3e0c9b47bef3c2879fc55ce1649fcc6cff6b7eddc1ae3947efadabc0399ee4099902841e1c394783c541a69c0b2af1dcd8598b5c388992876d8e7858aed8e2f5308e47d9b93e38f092f022e25a098b85645ea1b65d5b5e38355cb7d53cb83ed9d6bc2756c81b8692e12b1b572660c0d83d23e57f5ffa19bad8b1feca88786116725e92d6d6e399a37a38899d361337c02c04a0dbda849dc41b918a60e7830677446f3280ea4f0e5"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd1}, 0x90) 1.38288457s ago: executing program 3 (id=3357): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x60}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00000000000000ce830100000f00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x60}}, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00000000000000ce830100000f00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async) 1.344032634s ago: executing program 4 (id=3358): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @mark={0xc, 0x15, {0x35075b, 0x3b}}]}, 0x110}}, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa101000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000002d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) 1.203131202s ago: executing program 0 (id=3359): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000ffdaef862b", 0x48}], 0x1) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@delnexthop={0x30, 0x69, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [{0x8, 0x1, 0x1}, {0x8}, {0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0xc5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x8, 0x0, 0xb, @loopback, @remote, 0x7800, 0x20, 0xc33, 0x6}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111b600000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837"], &(0x7f0000000100)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r1, @fallback=0x3, 0xffffffffffffffff, 0x6}, 0x94) 1.180899259s ago: executing program 1 (id=3360): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710439000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x48}}, 0x0) 1.113842501s ago: executing program 0 (id=3361): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x4, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES32=r0]) socket$netlink(0x10, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x50040, &(0x7f0000000500)={0x11, 0xb, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) 1.101706096s ago: executing program 4 (id=3362): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2c}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x8004) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x800, 0xed, 0x0, 0x8f3}, {0x691, 0x7e, 0x4a, 0x10001}]}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r6, &(0x7f0000000100)="5b5d49ea5db3c1d99b366f817c5c6da76d3d661e1765a8dfcf0d8ad16732205fc80d319c24abc58a84a3d92f8ce453bb669e3b5bea73b103cfaf6aac935509bfc069f70a0e4b2f66f11d8c266eb3ef85f36abdb5feddd881bc1c746af9555e80e53b3e2fef20637935eaab2056e185170b79061141c3a25f3ca838cc6bd3", 0x7e, 0x4090, &(0x7f0000000180)={0xa, 0x4e20, 0x7f, @empty, 0x9}, 0x1c) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0xfffffffc, 0xf) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028005000300000000000800014000000001080002400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f0000000040)=0x7fff, 0x4) socket$key(0xf, 0x3, 0x2) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 915.119765ms ago: executing program 3 (id=3363): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x48, r1, 0x1, 0x400000, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x14, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c050) syz_emit_ethernet(0x74, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c20000000000000000000800450000140000000000739000000000000000a9749c30a6e88ba8261c0a8b1c0000b2dda16b0c633d658e03762baaeb0c723952e5fcb173fbf992c57e877dc9797133249320fc1568f1e54e62d3ef8b31403e5d6b9c9df4aea5f5f5cac023c00000000000000000000000000000000086fd234f652addde37286487aa51acf25f2b254b55c5db5f87283b572613a5a6cc26094f5f205785aec49a6d259bd0b6cf36140e47"], 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={&(0x7f0000000040)=@generic={0x1, "3f73f784b5143ec2d8e2f9992eee5a38398bb6b604d1b25f0f5af64dad0c6b5e212750a6cae8ab85dd44324ffe326a9bebe3fd9cb2d941b2c241fee6bed0e652d477bf86808fe243fbc43c16d2059b7155b073ad8715c9bcf6ac9b999113f9cf46b0d99a21060d97a5e6b3ab8dd918ecca8748a35b433994bc997d60e689"}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)="0f314749567924788d7060d7cfa21b9cb7596c6a70a9efcbaf19dcd0b078393407bf870435d1ed0dacfbd8", 0x8}, {&(0x7f0000000100)="0a872ec022c1c5f8450dc6c6c3857707d2ba09f030ee31c013165f5e16ef92c1c598d7461f34d3ab3a32f7be185ab12ec8e4b9098a0f80f9a97ad6395dc30fd9307814b7d2a232644480daa2733760a69c4abe54ebdb4cd99e3474933c86dad567f96add8459c11dc12fac4f63bfcc819f0fbfc23f3ff09bd07ddbbf2ffb0b289b055de00c1c2c577f68eebd063bbf24047cb97deeb8e364f379f9238a468a2ccbb0169f1c5e466aed7c6352ba269f6f9551f4dc8278cd450a79063948abffb8a99537ac00d07f671d2768651ae352167194", 0xd2}], 0x100000f9}, 0x91) 870.676642ms ago: executing program 3 (id=3364): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b0", 0x39}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000009c0)={0x0, @in6={{0xa, 0x4e23, 0xab9, @local, 0x8}}}, &(0x7f0000000100)=0x84) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x80000) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r5) sendto$l2tp6(r5, &(0x7f0000000000)="fd", 0x1, 0x88c0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000041000701fefeffff00000000017c0000040042801400018006000600800a000008001600", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x2000c800) sendmsg$alg(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x4004080) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000009a000000040000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) socket$netlink(0x10, 0x3, 0x9) 832.157968ms ago: executing program 4 (id=3365): socket(0x10, 0x80002, 0x0) (async) r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0xa, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf2503000000100007800c00018008000100", @ANYRES32=r1, @ANYBLOB="080001"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000844) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r8, &(0x7f0000001040)={0x27, r10, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r14], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="08042abd7000fedbdf250200000008000100", @ANYRES32=r10, @ANYBLOB="0e8e520c", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x8400) (async) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="08042abd7000fedbdf250200000008000100", @ANYRES32=r10, @ANYBLOB="0e8e520c", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x8400) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0xcc, 0x30, 0x51b, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_skbmod={0x54, 0x2, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x4, 0x10000000, 0x0, 0x6}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xcc}}, 0x0) r18 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], &(0x7f0000000140)='GPL\x00', 0x4, 0xa5, &(0x7f0000000040)=""/165, 0x0, 0x25, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[], 0x0, 0x5}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[], 0x0, 0x5}, 0x90) r19 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r19, 0x84, 0x84, &(0x7f0000000000), 0x90) (async) setsockopt$sock_attach_bpf(r19, 0x84, 0x84, &(0x7f0000000000), 0x90) sendmsg$inet(r19, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="d4", 0x1}], 0x1}, 0x40) (async) sendmsg$inet(r19, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="d4", 0x1}], 0x1}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x50) 524.710891ms ago: executing program 3 (id=3366): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000600)={{r0, &(0x7f0000000440)='\x00', 0x42402, &(0x7f0000000480)={@_ha_fsid={[0x28b0, 0x4]}, {0xff00, 0x2, 0x6, 0x8}}, 0xf09e, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000540)}, {[0x8, 0x4, 0x1, 0x2]}, 0x19, 0x73, &(0x7f0000000580)=""/115}) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000680)={&(0x7f0000000040)="622d502f3fa24e3be9ba4d768f447b526228d7c22b0c3e6c0b35110025d57ec244aab78b1365f85890", &(0x7f0000000200)=""/200, &(0x7f0000000300)="7d06ce419621542ed4fd550062f835760efdb764992c37c36e5d8ff8edc179b32c05bd240f07fdc6605d900dba69f6422051bd4d46794563cd8bcb6c500ec6e522e3eafb", &(0x7f0000000380)="aa8149ec80dad9845c46474d3b94b6d9e012bb81e9e06beb87acc97eec02876760f48d9dc2df077a0ea428fe2a88d33bcbb77028275751b55cdb598be3ab26f783cc0eab1036888b3e5a47949413a8d5f854fc8eb1154421b7e3b6113bc1052f8dbff03f71617fe532254da449356e644f5b938a688d35c951cb5831408825eb4caac2572bc46bfd86a0a571adb69964bc6059bd5ef993682a6106a9977818ed75056bd4f3f968fccc760ae4bad46cc6198f", 0x9, r1}, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf25080000000b0001006175746f"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="d35931b821b7ac86a814acf8e12ce2260c96", 0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000600)={{r0, &(0x7f0000000440)='\x00', 0x42402, &(0x7f0000000480)={@_ha_fsid={[0x28b0, 0x4]}, {0xff00, 0x2, 0x6, 0x8}}, 0xf09e, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000540)}, {[0x8, 0x4, 0x1, 0x2]}, 0x19, 0x73, &(0x7f0000000580)=""/115}) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000680)={&(0x7f0000000040)="622d502f3fa24e3be9ba4d768f447b526228d7c22b0c3e6c0b35110025d57ec244aab78b1365f85890", &(0x7f0000000200)=""/200, &(0x7f0000000300)="7d06ce419621542ed4fd550062f835760efdb764992c37c36e5d8ff8edc179b32c05bd240f07fdc6605d900dba69f6422051bd4d46794563cd8bcb6c500ec6e522e3eafb", &(0x7f0000000380)="aa8149ec80dad9845c46474d3b94b6d9e012bb81e9e06beb87acc97eec02876760f48d9dc2df077a0ea428fe2a88d33bcbb77028275751b55cdb598be3ab26f783cc0eab1036888b3e5a47949413a8d5f854fc8eb1154421b7e3b6113bc1052f8dbff03f71617fe532254da449356e644f5b938a688d35c951cb5831408825eb4caac2572bc46bfd86a0a571adb69964bc6059bd5ef993682a6106a9977818ed75056bd4f3f968fccc760ae4bad46cc6198f", 0x9, r1}, 0x38) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf25080000000b0001006175746f"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="d35931b821b7ac86a814acf8e12ce2260c96", 0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) (async) 521.431169ms ago: executing program 1 (id=3367): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'sit0\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x20, 0x7, 0x8b, 0x1, {{0x1a, 0x4, 0x0, 0x9, 0x68, 0x66, 0x0, 0x7, 0x2f, 0x0, @multicast1, @loopback, {[@timestamp_prespec={0x44, 0x54, 0x3a, 0x3, 0x6, [{@multicast1, 0x10}, {@multicast2, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x782e}, {@local, 0x8}, {@empty, 0x7}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x38}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x83}, {@rand_addr=0x64010100, 0x5}, {@remote, 0xa}]}]}}}}}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) (async, rerun: 32) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x25ffdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x4}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x5, 0x5, 0x38, @mcast2, @private1, 0x0, 0x1, 0x9, 0x6}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000007c0)={'gre0\x00', &(0x7f00000006c0)={'sit0\x00', 0x0, 0x8000, 0x20, 0x2, 0x0, {{0x34, 0x4, 0x3, 0x1, 0xd0, 0x67, 0x0, 0xc9, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2f}, {[@timestamp={0x44, 0x8, 0xfa, 0x0, 0x7, [0x6d05]}, @generic={0x86, 0x10, "1d98001c1bea55c6610d27b45736"}, @rr={0x7, 0x13, 0xe3, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x43}, @remote, @dev={0xac, 0x14, 0x14, 0x1f}]}, @lsrr={0x83, 0x23, 0x14, [@broadcast, @rand_addr=0x64010102, @loopback, @private=0xa010100, @loopback, @remote, @empty, @empty]}, @timestamp={0x44, 0x20, 0xb5, 0x0, 0x7, [0x5f, 0x8000, 0x7, 0x5, 0x9, 0x1, 0x0]}, @rr={0x7, 0xb, 0x6c, [@private=0xa010100, @broadcast]}, @timestamp_prespec={0x44, 0xc, 0xb, 0x3, 0xd, [{@private=0xa010102, 0x6}]}, @timestamp_addr={0x44, 0x1c, 0x26, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x3b}, 0x200}, {@multicast2, 0x18}, {@empty, 0x40f41ea4}]}, @cipso={0x86, 0x18, 0x0, [{0x5, 0x3, "1e"}, {0x2, 0xf, "7e11d613c6f11771d49f4c1ff8"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xffe0, 0xfff3}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r11 = socket(0x10, 0x3, 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'ip6tnl0\x00', &(0x7f0000000880)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x4, 0xffff, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x8000, 0x3ff, 0xee4}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f0000001300)=ANY=[@ANYBLOB="84080000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400350a00003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c000400000004047eac000008000100", @ANYRES32=0x0, @ANYBLOB="6401028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400030000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000c00000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004001d00000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="f00002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000a00000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000200000008000100", @ANYRES32=0x0, @ANYBLOB="3401028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ffffff7f08000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000600000008000100", @ANYRES32=0x0, @ANYBLOB="c400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="8000028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e00003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c0004009d0a3f087095000008000100", @ANYRES32=r1, @ANYBLOB="8400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000600", @ANYRES32=r3, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004003309000008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000008000100", @ANYRES32=r6, @ANYBLOB="a401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000200000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000700000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r10, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000700000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="7800028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400010000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="1bfdbeb8c98bf801a0b9a8a48d29b4e5d8f5f43311b1dc9ecaa56cda44a40d24d458d8a46506d8eb1a8d2e53c0a44f4a8dc713ee72b088521564afc774645d252f26a75c3508665747485aa766758ae23e6f617df4a710c0d218399013e92c7fbf9422fcb64ca5d26335c37fb1a43ed27bac16f72df09024341b0cfa70dd2a4ecfd490e2218c822b334f0cb20b14d754890c53a89141b5d2a310a76b00000028"], 0x884}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) r16 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) unshare(0x20000400) (async) unshare(0x24020400) (async) sendmmsg(r16, &(0x7f00000002c0), 0x40000000000009f, 0x0) 382.190729ms ago: executing program 3 (id=3368): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0xdc7d) bind$bt_sco(r0, &(0x7f0000000740)={0x1f, @none}, 0x8) listen(r0, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x4101}, {0xffff, 0xffff}, {0x7, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x9, 0x7, 0x6c, 0x0, 0x0, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x8, 0x0, 0xc, 0x7, 0x7fffffff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000c00)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbb000008110000000000000000000000ffffac1414bbff0200000000000000000000000000014e1d4e2000089078e9364805979491ece0d8d729a8df6884e663c6102e5bfcb3743d63eb9626d6d771bf99cdfee9030e058f1d09108ace08580b328a313cd421984045057e7559a9ed55"], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000080000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000020000000300"/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYRES8=0xffffffffffffffff], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e00000000000000070000000400000080000000", @ANYRES32, @ANYRESDEC=r7, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000042340000e5ffffff0000000000"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2, r8}, 0x38) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB='/'], 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0xffffffffffffffff, 0x4, 0x8}, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x8}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x18}, 0x18) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0xb83, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff}}, 0x69d, 0x3}, &(0x7f00000001c0)=0x90) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0xffffffffffffffff, 0x1}, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) 341.915561ms ago: executing program 0 (id=3369): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000202010800000000000000000a0000004400028006000340000000000c0002d905000100000000002c00018014000300fe88000000000000000000001a000001090004"], 0x58}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x409, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 142.819568ms ago: executing program 4 (id=3370): r0 = socket$inet6(0x10, 0x2, 0x0) write(r0, &(0x7f00000007c0)="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", 0xfc) (async) write(r0, &(0x7f00000007c0)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000b80000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e2731c83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfde89d334b2b6af2a8d03f2329622943283f4b9e611183b102b2b8f5566791802e07f050cae2015180a94a27b1d7b02d3f4e84f2013cd1890058a10000c880ac801fe4af00004995c7a596dae744f0d4794eedfca92c09d776e7a90ab79a6f00a1960000", 0xfc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc0}}, &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000180)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a2f0000060001"], 0x1c}}, 0x0) (async) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a2f0000060001"], 0x1c}}, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x310000, 0x1000, 0x4, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'sit0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r7, &(0x7f0000000200)={0x2c, 0x1, r9, 0x14, r7}, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="0ca1949501967a2464ec531fe77d36bc6f936951bfdc62c4784a9f524b2addf74b8db35bbfb6890f686dcf2b55a17a5360c88d6a959862b2a3ce59f3e1ffffffffe2f71987421675dc068111"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 142.361519ms ago: executing program 1 (id=3371): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x8000, 0x0, 0x4}, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @broadcast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x1574, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc83}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r9}}], 0x20, 0x2400e044}, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x34, r10, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 0s ago: executing program 0 (id=3372): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) shutdown(r1, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) syz_emit_ethernet(0x82, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000800450000740000000000019078ac1e0001ac1414aa05009078e00000e04600300ad4628064330000000000000064010100070300070300443c00da0a01212f00000000e0000001000000007f00000100000200ac1414aa00000000ce00000000000000ac1414000000000000000000000000000000236074b14af357794f748874e5b7d9260ae3788c25"], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$inet(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fcdd"], 0x48}}, 0x400400c0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$unix(r5, &(0x7f0000000640)={&(0x7f00000005c0)=@file={0x1, './bus\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x4004044) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000012180), 0x2, 0x0) write$6lowpan_control(r7, &(0x7f00000121c0)='connect aa:aa:aa:aa:aa:10 1', 0x1b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0xac, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x78, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'geneve1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x69a53892}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54f977ff}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_macvtap\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'virt_wifi0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}]}], {0x14}}, 0x124}}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)={0x1c, r3, 0x8c864ca4e0b522ed, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44000040}, 0x20000000) kernel console output (not intermixed with test programs): 16] bond7: entered allmulticast mode [ 293.568657][T12016] 8021q: adding VLAN 0 to HW filter on device bond7 [ 293.663239][T12016] bond8: entered promiscuous mode [ 293.668463][T12016] bond8: entered allmulticast mode [ 293.677369][T12016] 8021q: adding VLAN 0 to HW filter on device bond8 [ 293.807554][T12016] bond9: entered promiscuous mode [ 293.833951][T12016] bond9: entered allmulticast mode [ 293.863433][T12016] 8021q: adding VLAN 0 to HW filter on device bond9 [ 293.968842][T12016] bond10: entered promiscuous mode [ 294.002123][T12016] bond10: entered allmulticast mode [ 294.021958][T12056] __nla_validate_parse: 4 callbacks suppressed [ 294.021975][T12056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1696'. [ 294.045586][T12016] 8021q: adding VLAN 0 to HW filter on device bond10 [ 294.240698][T12016] bond11: entered promiscuous mode [ 294.245906][T12016] bond11: entered allmulticast mode [ 294.252495][T12016] 8021q: adding VLAN 0 to HW filter on device bond11 [ 294.274588][T12056] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 294.407061][T12068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1698'. [ 294.475633][T12080] ip6gre1: entered promiscuous mode [ 294.490759][T12080] ip6gre1: entered allmulticast mode [ 294.586509][T12068] netlink: 'syz.1.1698': attribute type 1 has an invalid length. [ 294.618443][T12068] netlink: 'syz.1.1698': attribute type 3 has an invalid length. [ 294.655454][T12068] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1698'. [ 295.021611][T12114] team0: Port device syz_tun added [ 295.213032][T12124] lo speed is unknown, defaulting to 1000 [ 295.232501][T12124] lo speed is unknown, defaulting to 1000 [ 295.252554][T12132] ±ÿª¨úrBº“: renamed from lo [ 295.277282][T12124] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 295.278131][T12132] netlink: 'syz.2.1710': attribute type 1 has an invalid length. [ 295.323494][T12124] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 295.373186][T12124] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 295.406906][T12124] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 295.448766][T12138] netlink: 'syz.0.1713': attribute type 21 has an invalid length. [ 295.463510][T12138] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1713'. [ 295.466827][T12124] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 295.493946][T12138] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1713'. [ 295.550570][T12140] syzkaller0: entered promiscuous mode [ 295.569274][T12140] syzkaller0: entered allmulticast mode [ 295.615039][T12124] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 295.664367][T12124] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 295.771823][T12124] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 295.804101][T12124] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 295.842011][T12124] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 296.138650][T12172] netlink: 'syz.2.1719': attribute type 1 has an invalid length. [ 296.306294][T12172] bond12: entered promiscuous mode [ 296.312689][T12172] 8021q: adding VLAN 0 to HW filter on device bond12 [ 296.375902][T12186] 8021q: adding VLAN 0 to HW filter on device bond12 [ 296.407788][T12186] bond12: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 296.448145][T12186] bond12: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 296.492916][T12186] bond12: (slave ip6gre2): making interface the new active one [ 296.510705][T12186] ip6gre2: entered promiscuous mode [ 296.523756][T12186] bond12: (slave ip6gre2): Enslaving as an active interface with an up link [ 296.665671][T12206] netlink: 'syz.1.1727': attribute type 5 has an invalid length. [ 296.947742][T12228] netlink: 'syz.3.1732': attribute type 23 has an invalid length. [ 297.200810][T12241] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1737'. [ 297.313021][T12246] netlink: 'syz.4.1738': attribute type 7 has an invalid length. [ 297.345531][T12256] netlink: 'syz.2.1740': attribute type 4 has an invalid length. [ 297.358271][T12246] pim6reg1: entered promiscuous mode [ 297.367220][T12246] pim6reg1: entered allmulticast mode [ 297.375133][T12256] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1740'. [ 297.839455][T12284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1746'. [ 298.685436][T12305] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1750'. [ 298.789457][T12308] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 298.897275][T12308] syzkaller0: entered promiscuous mode [ 298.922126][T12308] syzkaller0: entered allmulticast mode [ 300.881489][T12367] syzkaller0: entered promiscuous mode [ 300.887741][T12367] syzkaller0: entered allmulticast mode [ 300.895178][T12373] validate_nla: 1 callbacks suppressed [ 300.895189][T12373] netlink: 'syz.4.1765': attribute type 2 has an invalid length. [ 301.087082][T12383] Cannot find del_set index 4 as target [ 301.141802][T12386] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.1768'. [ 301.276076][T12392] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 301.384153][T12395] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1770'. [ 301.417959][T12395] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1770'. [ 301.526891][T12414] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1774'. [ 301.571508][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1775'. [ 301.580482][T12417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1774'. [ 301.608255][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1775'. [ 301.679006][T12423] xt_TCPMSS: Only works on TCP SYN packets [ 301.691008][T12423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1776'. [ 301.937796][T12439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1780'. [ 302.037508][T12447] netlink: 'syz.1.1780': attribute type 27 has an invalid length. [ 302.217443][T12451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1783'. [ 302.569413][T12477] netlink: 'syz.2.1791': attribute type 1 has an invalid length. [ 302.754091][T12489] netlink: 'syz.0.1794': attribute type 2 has an invalid length. [ 302.864219][T12493] ip6t_rpfilter: unknown options [ 302.883155][T12496] ip6gretap0: entered promiscuous mode [ 302.895075][T12496] ip6gretap0: entered allmulticast mode [ 303.195266][T12516] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 303.365944][T12532] netlink: 'syz.4.1808': attribute type 1 has an invalid length. [ 303.439146][T12532] bond7: entered promiscuous mode [ 303.447083][T12532] 8021q: adding VLAN 0 to HW filter on device bond7 [ 303.521223][T12532] bond7: (slave bridge4): making interface the new active one [ 303.541606][T12532] bridge4: entered promiscuous mode [ 303.548211][T12532] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 303.865135][T12557] syzkaller0: entered promiscuous mode [ 303.871358][T12557] syzkaller0: entered allmulticast mode [ 304.245202][T12573] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:88:c4:59:f7:e2 [ 305.215753][T12621] netlink: 'syz.4.1833': attribute type 2 has an invalid length. [ 305.226102][T12621] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 305.235575][T12621] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 305.823713][T12650] bond4: option mode: unable to set because the bond device has slaves [ 306.012698][T12662] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 306.077393][T12665] netlink: 'syz.3.1847': attribute type 30 has an invalid length. [ 306.168527][T12662] __nla_validate_parse: 11 callbacks suppressed [ 306.168544][T12662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1846'. [ 306.344920][T12677] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1849'. [ 306.511294][T12691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1853'. [ 306.982847][T12717] tipc: Enabled bearer , priority 0 [ 306.995914][T12717] syzkaller0: entered promiscuous mode [ 307.007905][T12717] syzkaller0: entered allmulticast mode [ 307.029994][T12717] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 307.128477][T12717] tipc: Resetting bearer [ 307.169184][T12716] tipc: Resetting bearer [ 307.222456][T12716] tipc: Disabling bearer [ 307.475702][T12747] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1866'. [ 307.763359][T12760] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1870'. [ 307.802916][T12760] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1870'. [ 308.073128][T12772] netlink: 'syz.1.1873': attribute type 9 has an invalid length. [ 308.083365][T12772] netlink: 'syz.1.1873': attribute type 6 has an invalid length. [ 308.162401][T12776] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1874'. [ 308.434230][T12786] IPVS: set_ctl: invalid protocol: 1 10.1.1.0:20000 [ 308.495969][T12787] IPVS: set_ctl: invalid protocol: 43 172.20.20.54:20001 [ 308.753065][T12796] netlink: 'syz.3.1879': attribute type 1 has an invalid length. [ 308.761341][T12796] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1879'. [ 310.190381][T12730] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 310.407727][T12804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.434404][T12805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1882'. [ 310.470990][T12805] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1882'. [ 313.668240][T12821] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 313.845680][T12865] __nla_validate_parse: 5 callbacks suppressed [ 313.845697][T12865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1902'. [ 314.028597][T12874] xt_hashlimit: size too large, truncated to 1048576 [ 314.167064][T12885] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1908'. [ 314.223900][T12889] netlink: 'syz.1.1909': attribute type 4 has an invalid length. [ 314.363923][T12893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1911'. [ 314.613529][T12908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1917'. [ 314.645779][T12905] sch_tbf: burst 0 is lower than device lo mtu (32783) ! [ 314.661464][T12908] : renamed from gretap0 (while UP) [ 314.675852][T12908] tipc: Disabling bearer [ 314.894163][T12919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1920'. [ 314.928295][T12899] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1912'. [ 315.004416][T12924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1922'. [ 315.647772][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1932'. [ 315.669407][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1932'. [ 315.692845][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1932'. [ 315.786630][T12959] bond7: option resend_igmp: invalid value (32767) [ 315.806032][T12959] bond7: option resend_igmp: allowed values 0 - 255 [ 315.825836][T12959] bond7 (unregistering): Released all slaves [ 315.891472][T12974] gre0: entered allmulticast mode [ 316.041593][T12986] netlink: 'syz.4.1939': attribute type 5 has an invalid length. [ 316.287264][T13000] IPVS: set_ctl: invalid protocol: 59 172.20.20.38:20000 [ 316.335155][ T50] block nbd2: Receive control failed (result -32) [ 316.343456][T13006] netlink: zone id is out of range [ 316.349196][T13006] netlink: zone id is out of range [ 316.367764][T13006] netlink: zone id is out of range [ 316.389243][T13006] netlink: zone id is out of range [ 316.412153][T13006] netlink: zone id is out of range [ 316.418047][T13006] netlink: zone id is out of range [ 316.424274][T13006] netlink: zone id is out of range [ 316.429581][T13006] netlink: zone id is out of range [ 316.435317][T13006] netlink: zone id is out of range [ 316.440808][T13006] netlink: zone id is out of range [ 316.446212][T13009] macvlan2: entered promiscuous mode [ 316.459253][T13009] macvlan2: entered allmulticast mode [ 316.773401][T13028] bond14: option xmit_hash_policy: invalid value (64) [ 316.788208][T13028] bond14 (unregistering): Released all slaves [ 317.000400][ T8169] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.018456][ T8169] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.033830][ T8169] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.044890][ T8169] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.102662][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.115391][T13047] netlink: 'syz.1.1960': attribute type 1 has an invalid length. [ 317.134580][T13047] netlink: 'syz.1.1960': attribute type 4 has an invalid length. [ 317.153011][T13047] netlink: 'syz.1.1960': attribute type 1 has an invalid length. [ 317.170009][T13047] netlink: 'syz.1.1960': attribute type 4 has an invalid length. [ 317.753846][ T9385] block nbd1: Connection timed out, retrying (0/2 alive) [ 317.762506][ T9385] block nbd1: Connection timed out, retrying (0/2 alive) [ 317.772136][ T1664] block nbd1: Dead connection, failed to find a fallback [ 317.785462][ T9385] block nbd1: Connection timed out, retrying (0/2 alive) [ 317.792986][ T1664] block nbd1: shutting down sockets [ 317.798920][ T9385] block nbd1: Connection timed out, retrying (0/2 alive) [ 317.806866][ T1664] blk_print_req_error: 63 callbacks suppressed [ 317.806880][ T1664] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 317.823892][ T1664] buffer_io_error: 138 callbacks suppressed [ 317.823908][ T1664] Buffer I/O error on dev nbd1, logical block 0, async page read [ 317.839181][ T1664] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 317.848894][ T1664] Buffer I/O error on dev nbd1, logical block 3, async page read [ 317.856936][ T1664] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 317.866380][ T1664] Buffer I/O error on dev nbd1, logical block 2, async page read [ 317.874472][ T1664] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 317.884021][ T1664] Buffer I/O error on dev nbd1, logical block 1, async page read [ 317.893186][ T1664] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 317.902859][ T1664] Buffer I/O error on dev nbd1, logical block 0, async page read [ 317.909867][ T1697] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 317.920982][ T1697] Buffer I/O error on dev nbd1, logical block 1, async page read [ 317.928801][ T1697] Buffer I/O error on dev nbd1, logical block 2, async page read [ 317.938729][ T1697] Buffer I/O error on dev nbd1, logical block 3, async page read [ 317.948127][ T1697] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 317.958774][ T1697] Buffer I/O error on dev nbd1, logical block 0, async page read [ 317.968232][ T1697] Buffer I/O error on dev nbd1, logical block 1, async page read [ 317.976491][ T1697] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 317.993690][ T1697] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 318.004068][ T1697] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 318.014780][ T8413] ldm_validate_partition_table(): Disk read failed. [ 318.038043][ T8413] Dev nbd1: unable to read RDB block 0 [ 318.049148][ T8413] nbd1: unable to read partition table [ 318.066799][ T8413] ldm_validate_partition_table(): Disk read failed. [ 318.077763][ T8413] Dev nbd1: unable to read RDB block 0 [ 318.085890][ T8413] nbd1: unable to read partition table [ 318.583141][T13123] netlink: 'syz.0.1985': attribute type 18 has an invalid length. [ 318.592875][T13119] gre0: entered promiscuous mode [ 318.608111][T13119] gre0: entered allmulticast mode [ 318.780722][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 318.883593][T13142] netlink: 'syz.1.1989': attribute type 1 has an invalid length. [ 318.991442][T13151] netlink: 'syz.2.1992': attribute type 10 has an invalid length. [ 318.999354][T13151] __nla_validate_parse: 14 callbacks suppressed [ 318.999367][T13151] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1992'. [ 319.039566][T13151] team0: Port device geneve1 added [ 319.226621][T13163] IPv6: NLM_F_CREATE should be specified when creating new route [ 319.244703][T13158] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1995'. [ 319.257143][T13158] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1995'. [ 319.804130][T13208] netlink: 'syz.3.2005': attribute type 2 has an invalid length. [ 320.024428][T13228] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 320.225455][T13242] netlink: 'syz.1.2011': attribute type 49 has an invalid length. [ 320.400474][T13248] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2014'. [ 320.411080][T13242] ip6gretap0: entered promiscuous mode [ 320.417364][T13242] ip6gretap0: entered allmulticast mode [ 320.679649][T13264] netlink: 'syz.0.2019': attribute type 1 has an invalid length. [ 320.703525][T13264] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2019'. [ 320.795464][T13269] xt_CT: You must specify a L4 protocol and not use inversions on it [ 320.853266][T13269] xt_CT: You must specify a L4 protocol and not use inversions on it [ 321.144020][T13286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2026'. [ 321.178467][T13286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2026'. [ 321.184892][T13292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2029'. [ 321.219691][T13292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2029'. [ 321.251421][T13292] netlink: 'syz.2.2029': attribute type 15 has an invalid length. [ 321.333129][ T8169] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 321.384139][ T8169] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 321.408293][ T8169] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 321.448855][T13310] IPv6: sit1: Disabled Multicast RS [ 321.465427][T13310] sit1: entered allmulticast mode [ 321.514307][ T8169] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 321.767877][T13329] macvtap0: entered allmulticast mode [ 321.996516][T13342] netlink: 'syz.1.2036': attribute type 8 has an invalid length. [ 322.227779][T13354] netlink: 'syz.1.2040': attribute type 4 has an invalid length. [ 322.419370][T13362] netlink: 'syz.0.2043': attribute type 30 has an invalid length. [ 322.603895][T13380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2049'. [ 322.946890][T13405] ipt_rpfilter: unknown options [ 323.365098][T13431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.499899][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 323.919934][ T5288] veth1_macvtap: left promiscuous mode [ 324.095938][T13472] __nla_validate_parse: 7 callbacks suppressed [ 324.095954][T13472] netlink: 576 bytes leftover after parsing attributes in process `syz.3.2070'. [ 324.297237][T13486] netlink: 'syz.4.2074': attribute type 1 has an invalid length. [ 324.331740][T13486] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2074'. [ 324.336116][T13490] net_ratelimit: 730 callbacks suppressed [ 324.336134][T13490] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 324.497167][T13500] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2079'. [ 324.508470][T13500] tipc: Enabled bearer , priority 10 [ 324.771624][T13521] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 324.902049][T13529] xt_bpf: check failed: parse error [ 324.944275][T13532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2085'. [ 325.056449][T13540] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2087'. [ 325.500386][ T995] tipc: Node number set to 3747769704 [ 325.878100][T13554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 325.982585][T13557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2090'. [ 325.993614][T13557] unsupported nlmsg_type 40 [ 327.296008][T13490] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 327.529587][T13563] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2091'. [ 328.039018][ T50] block nbd3: Receive control failed (result -32) [ 328.487295][T13618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2106'. [ 328.712240][T13631] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 328.735279][T13632] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 328.952348][T13623] xt_hashlimit: size too large, truncated to 1048576 [ 329.018232][T13649] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2114'. [ 329.155899][T13657] netlink: 'syz.1.2117': attribute type 1 has an invalid length. [ 329.186811][T13657] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2117'. [ 329.285014][ T8171] bond0: (slave bond_slave_0): interface is now down [ 329.356344][ T8171] bond0: now running without any active interface! [ 329.470517][T13667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2120'. [ 329.512584][T13667] hsr_slave_0: left promiscuous mode [ 329.533756][T13667] hsr_slave_1: left promiscuous mode [ 359.998990][T13750] netlink: 'syz.3.2128': attribute type 64 has an invalid length. [ 360.126340][T13763] netlink: 'syz.0.2130': attribute type 1 has an invalid length. [ 360.351493][T13763] 8021q: adding VLAN 0 to HW filter on device bond8 [ 360.507129][T13777] netlink: 'syz.3.2136': attribute type 2 has an invalid length. [ 360.900613][T13796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2140'. [ 360.966801][T13801] IPv6: addrconf: prefix option has invalid lifetime [ 361.010734][T13801] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 361.212985][T13811] bridge_slave_1: left allmulticast mode [ 361.230103][T13811] bridge_slave_1: left promiscuous mode [ 361.237987][T13811] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.279320][T13811] bridge_slave_0: left allmulticast mode [ 361.292881][T13811] bridge_slave_0: left promiscuous mode [ 361.310529][T13811] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.701593][T13830] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2152'. [ 361.774217][T13834] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 362.022360][T13846] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2158'. [ 362.219187][T13854] ip6t_srh: unknown srh invflags 4000 [ 362.330832][T13857] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2162'. [ 362.628004][T13867] sch_fq: defrate 0 ignored. [ 362.823567][T13881] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2171'. [ 362.935806][T13886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2173'. [ 362.950693][T13888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2172'. [ 363.054400][T13892] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2175'. [ 363.095044][T13892] tc_dump_action: action bad kind [ 363.255799][T13908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2179'. [ 363.370002][T13911] bond9: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 363.393322][T13911] bond9 (unregistering): Released all slaves [ 363.436377][T13920] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2185'. [ 363.607917][T13934] netlink: 'syz.3.2186': attribute type 1 has an invalid length. [ 363.673238][T13937] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.064418][T13964] ieee802154 phy0 wpan0: encryption failed: -22 [ 364.637292][T13988] netlink: 'syz.2.2204': attribute type 1 has an invalid length. [ 364.660723][T13988] 8021q: adding VLAN 0 to HW filter on device bond14 [ 364.934651][T13996] netlink: 'syz.0.2207': attribute type 10 has an invalid length. [ 365.307266][T14015] netlink: 'syz.4.2213': attribute type 11 has an invalid length. [ 365.316968][T14016] block nbd1: NBD_DISCONNECT [ 365.322754][T14016] block nbd1: Send disconnect failed -32 [ 365.358798][T14016] block nbd1: Send disconnect failed -32 [ 365.643052][T14019] gtp2: entered allmulticast mode [ 365.654220][T14019] team0: Device gtp2 is of different type [ 365.922481][T14046] __nla_validate_parse: 10 callbacks suppressed [ 365.922499][T14046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2225'. [ 366.206867][T14073] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 366.247689][T14075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2234'. [ 366.321546][T14068] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2232'. [ 366.644266][T14098] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2241'. [ 366.647260][T14100] xt_l2tp: v2 sid > 0xffff: 1114112 [ 366.736378][T14107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2244'. [ 366.892842][T14107] 8021q: adding VLAN 0 to HW filter on device bond10 [ 367.131784][T14137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2252'. [ 367.168174][T14137] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2252'. [ 367.178338][T14137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2252'. [ 367.192711][T14134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2250'. [ 367.271140][T14141] bond7: entered allmulticast mode [ 367.314619][T14145] netlink: 'syz.3.2254': attribute type 1 has an invalid length. [ 367.365792][T14149] nftables ruleset with unbound set [ 367.421645][T14145] bond7: entered promiscuous mode [ 367.436578][T14145] 8021q: adding VLAN 0 to HW filter on device bond7 [ 367.505610][T14159] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2256'. [ 367.683401][T14173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.700443][T14172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.707603][T14173] openvswitch: netlink: Missing key (keys=40, expected=100) [ 367.738130][T14180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.941994][T14197] netlink: 'syz.3.2265': attribute type 9 has an invalid length. [ 368.095472][T14201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 368.364526][T14217] x_tables: unsorted entry at hook 3 [ 368.384065][T14218] vlan4: entered allmulticast mode [ 368.389286][T14218] bond0: entered allmulticast mode [ 368.395757][T14218] bond_slave_0: entered allmulticast mode [ 368.892302][T14251] netlink: 'syz.3.2282': attribute type 14 has an invalid length. [ 368.955914][T14242] "syz.4.2279" (14242) uses obsolete ecb(arc4) skcipher [ 369.217537][T14273] netlink: 'syz.2.2287': attribute type 1 has an invalid length. [ 369.355696][T14277] netlink: 'syz.4.2293': attribute type 39 has an invalid length. [ 369.578764][T14293] 8021q: VLANs not supported on ipvlan0 [ 369.741850][T14293] macvtap1: entered promiscuous mode [ 369.761074][T14293] vlan0: entered promiscuous mode [ 369.768939][T14293] macvtap1: entered allmulticast mode [ 369.775733][T14293] vlan0: entered allmulticast mode [ 369.781292][T14293] veth0_vlan: entered allmulticast mode [ 369.858074][T14310] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 369.903633][T14306] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 369.937209][T14305] bond8: entered promiscuous mode [ 369.944331][T14305] bridge5: entered promiscuous mode [ 369.950037][T14305] bridge6: entered promiscuous mode [ 369.955494][T14305] bond8: entered allmulticast mode [ 369.969347][T14305] bridge5: entered allmulticast mode [ 369.975631][T14305] bridge6: entered allmulticast mode [ 369.984852][T14305] 8021q: adding VLAN 0 to HW filter on device bond8 [ 370.375690][T14340] netlink: 'syz.2.2308': attribute type 2 has an invalid length. [ 370.499544][T14347] sctp: [Deprecated]: syz.1.2310 (pid 14347) Use of struct sctp_assoc_value in delayed_ack socket option. [ 370.499544][T14347] Use struct sctp_sack_info instead [ 370.542949][T14352] openvswitch: netlink: Message has 472 unknown bytes. [ 370.796825][T14357] syzkaller0: entered promiscuous mode [ 370.804973][T14357] syzkaller0: entered allmulticast mode [ 372.628287][T14368] tipc: Enabled bearer , priority 0 [ 372.638874][T14372] syzkaller0: entered promiscuous mode [ 372.649833][T14372] syzkaller0: entered allmulticast mode [ 372.664173][T14376] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 372.784432][T14387] tipc: Resetting bearer [ 372.818081][T14367] tipc: Resetting bearer [ 372.876973][T14409] __nla_validate_parse: 15 callbacks suppressed [ 372.876992][T14409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2323'. [ 372.910646][T14367] tipc: Disabling bearer [ 373.232057][T14437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2327'. [ 373.399207][T14463] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2332'. [ 373.411366][T14463] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2332'. [ 375.341768][ T50] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 376.034438][T14422] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 376.046536][T14442] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2328'. [ 376.275989][T14483] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2341'. [ 376.301957][T14483] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2341'. [ 376.383158][T14483] netlink: 'syz.1.2341': attribute type 1 has an invalid length. [ 376.393707][T14490] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2344'. [ 376.395094][T14487] syzkaller0: entered promiscuous mode [ 376.434885][T14487] syzkaller0: entered allmulticast mode [ 376.474054][T14483] 8021q: adding VLAN 0 to HW filter on device bond8 [ 376.488463][T14487] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 376.536205][T14488] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 376.731299][T14509] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 376.817958][T14512] syzkaller1: entered promiscuous mode [ 376.836171][T14512] syzkaller1: entered allmulticast mode [ 376.872845][T14512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2350'. [ 377.178058][T14527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.356303][T14546] veth0: mtu less than device minimum [ 377.360128][T14543] nbd: must specify an index to disconnect [ 377.382384][T14543] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2360'. [ 377.414942][T14543] gtp0: entered promiscuous mode [ 377.429572][T14543] gtp0: entered allmulticast mode [ 377.503701][T14552] tipc: Enabled bearer , priority 0 [ 377.597694][T14552] tipc: Disabling bearer [ 378.020807][T14585] syzkaller0: entered promiscuous mode [ 378.037248][T14585] syzkaller0: entered allmulticast mode [ 378.057121][T14589] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 378.184042][T14598] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2373'. [ 378.204197][T14598] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 378.379001][T14605] geneve4: entered promiscuous mode [ 378.395576][T14614] FAULT_INJECTION: forcing a failure. [ 378.395576][T14614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.445855][T14614] CPU: 0 UID: 0 PID: 14614 Comm: syz.3.2375 Not tainted syzkaller #0 PREEMPT(full) [ 378.445888][T14614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 378.445906][T14614] Call Trace: [ 378.445914][T14614] [ 378.445922][T14614] dump_stack_lvl+0xe8/0x150 [ 378.445956][T14614] should_fail_ex+0x40c/0x560 [ 378.445983][T14614] _copy_to_user+0x31/0xb0 [ 378.446021][T14614] simple_read_from_buffer+0xe1/0x170 [ 378.446052][T14614] proc_fail_nth_read+0x1bb/0x230 [ 378.446080][T14614] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 378.446109][T14614] ? rw_verify_area+0x24a/0x4c0 [ 378.446136][T14614] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 378.446160][T14614] vfs_read+0x213/0xa80 [ 378.446192][T14614] ? __pfx___mutex_lock+0x10/0x10 [ 378.446219][T14614] ? __pfx_vfs_read+0x10/0x10 [ 378.446247][T14614] ? __fget_files+0x2a/0x420 [ 378.446276][T14614] ? __fget_files+0x3a2/0x420 [ 378.446298][T14614] ? __fget_files+0x2a/0x420 [ 378.446330][T14614] ksys_read+0x150/0x270 [ 378.446359][T14614] ? __pfx_ksys_read+0x10/0x10 [ 378.446394][T14614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.446415][T14614] do_syscall_64+0x174/0x580 [ 378.446438][T14614] ? trace_irq_disable+0x3b/0x140 [ 378.446461][T14614] ? clear_bhb_loop+0x40/0x90 [ 378.446485][T14614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.446504][T14614] RIP: 0033:0x7f834c55e68e [ 378.446521][T14614] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 378.446537][T14614] RSP: 002b:00007f834d3cefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 378.446557][T14614] RAX: ffffffffffffffda RBX: 00007f834d3cf6c0 RCX: 00007f834c55e68e [ 378.446571][T14614] RDX: 000000000000000f RSI: 00007f834d3cf0a0 RDI: 0000000000000008 [ 378.446583][T14614] RBP: 00007f834d3cf090 R08: 0000000000000000 R09: 0000000000000000 [ 378.446595][T14614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.446606][T14614] R13: 00007f834c826218 R14: 00007f834c826180 R15: 00007ffca9c99518 [ 378.446640][T14614] [ 378.665568][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.750311][T14605] macvtap1: entered promiscuous mode [ 378.755943][T14605] macvtap1: entered allmulticast mode [ 378.761535][T14605] veth1_vlan: entered allmulticast mode [ 378.800772][T14616] macvtap2: entered promiscuous mode [ 378.806237][T14616] macvtap2: entered allmulticast mode [ 379.121555][T14647] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 379.174048][T14635] 8021q: adding VLAN 0 to HW filter on device bond8 [ 379.199465][T14635] bond8: entered allmulticast mode [ 379.209396][T14635] bond0: (slave bond8): Enslaving as an active interface with a down link [ 379.226012][T14640] pimreg8: entered allmulticast mode [ 379.458877][T14660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2389'. [ 379.558001][T14668] xt_l2tp: v2 doesn't support IP mode [ 379.607142][T14668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2392'. [ 379.646551][T14676] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 379.729095][T14668] hsr_slave_1 (unregistering): left promiscuous mode [ 379.741280][T14690] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2394'. [ 379.765695][T14690] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2394'. [ 379.788294][T14694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2399'. [ 379.933172][T14693] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 379.955327][T14699] netlink: 'syz.2.2402': attribute type 2 has an invalid length. [ 379.967375][T14697] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2401'. [ 380.111446][T14709] netlink: 'syz.3.2403': attribute type 12 has an invalid length. [ 380.227894][T14713] netlink: 'syz.4.2404': attribute type 1 has an invalid length. [ 380.613852][T14721] netlink: 'syz.2.2406': attribute type 12 has an invalid length. [ 380.743272][T14723] netlink: 'syz.2.2406': attribute type 17 has an invalid length. [ 380.938279][T14724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2406'. [ 381.006097][T14728] IPv6: NLM_F_CREATE should be specified when creating new route [ 382.134635][T14744] netlink: 'syz.4.2410': attribute type 1 has an invalid length. [ 382.292776][T14744] bond10: entered promiscuous mode [ 382.303835][T14744] 8021q: adding VLAN 0 to HW filter on device bond10 [ 382.316981][T14757] netlink: 'syz.1.2414': attribute type 12 has an invalid length. [ 382.637438][T14776] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2419'. [ 382.688045][T14776] blkio.reset_stats is deprecated [ 382.909558][T14798] netlink: 'syz.1.2425': attribute type 1 has an invalid length. [ 382.918503][T14795] syzkaller0: entered promiscuous mode [ 382.930300][T14795] syzkaller0: entered allmulticast mode [ 383.007313][T14801] netlink: 'syz.0.2426': attribute type 4 has an invalid length. [ 383.158062][T14812] netlink: 'syz.1.2428': attribute type 1 has an invalid length. [ 383.246312][T14821] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2430'. [ 383.463874][T14833] xt_hashlimit: size too large, truncated to 1048576 [ 383.750734][T14843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2434'. [ 383.945851][T14853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2437'. [ 384.085440][T14861] bond11: invalid ARP target 0.0.0.0 specified for addition [ 384.110064][T14861] bond11: option arp_ip_target: invalid value (0) [ 384.126593][T14861] bond11 (unregistering): Released all slaves [ 384.217871][T14876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2443'. [ 384.608147][T14895] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2449'. [ 384.920694][T14910] tipc: Enabled bearer , priority 0 [ 385.077894][T14910] syzkaller0: entered promiscuous mode [ 385.092403][T14910] syzkaller0: entered allmulticast mode [ 385.118718][T14910] tipc: Resetting bearer [ 385.195091][T14909] tipc: Resetting bearer [ 385.389513][T14930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2461'. [ 385.446425][T14933] netlink: 'syz.0.2461': attribute type 5 has an invalid length. [ 386.937056][T14909] tipc: Disabling bearer [ 386.948151][T14928] veth0_to_batadv: mtu less than device minimum [ 387.023858][T14930] team0: Port device syz_tun removed [ 387.367419][T14956] netlink: 'syz.2.2469': attribute type 1 has an invalid length. [ 387.543763][T14966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2471'. [ 387.632800][T14970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2471'. [ 387.767552][T14979] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2475'. [ 387.918742][T14984] tipc: Enabling of bearer rejected, failed to enable media [ 387.935260][T14984] wg2: entered promiscuous mode [ 387.942856][T14984] wg2: entered allmulticast mode [ 387.966588][T14988] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2477'. [ 388.212790][T15003] netlink: 'syz.3.2480': attribute type 1 has an invalid length. [ 388.244585][T15003] netlink: 'syz.3.2480': attribute type 2 has an invalid length. [ 388.313979][T15007] __nla_validate_parse: 1 callbacks suppressed [ 388.313999][T15007] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2482'. [ 388.500782][T15019] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2485'. [ 388.511533][T15019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2485'. [ 388.524803][T15019] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2485'. [ 388.534121][T15019] netlink: 'syz.4.2485': attribute type 2 has an invalid length. [ 388.549247][T15019] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2485'. [ 390.300754][T15040] lo: entered promiscuous mode [ 390.417096][T15040] tunl0: entered promiscuous mode [ 390.448048][T15040] gre0: entered promiscuous mode [ 390.466769][T15040] 0ªX¹¦Dö»: entered promiscuous mode [ 390.477052][T15040] erspan0: entered promiscuous mode [ 390.488170][T15040] ip_vti0: entered promiscuous mode [ 390.496858][T15040] ip6_vti0: entered promiscuous mode [ 390.506665][T15040] sit0: entered promiscuous mode [ 390.519553][T15040] ip6tnl0: entered promiscuous mode [ 390.528409][T15040] ip6gre0: entered promiscuous mode [ 390.537240][T15040] vcan0: entered promiscuous mode [ 390.547852][T15040] bond0: entered promiscuous mode [ 390.562881][T15040] bond_slave_0: entered promiscuous mode [ 390.568757][T15040] bond_slave_1: entered promiscuous mode [ 390.575982][T15040] team0: entered promiscuous mode [ 390.581377][T15040] team_slave_1: entered promiscuous mode [ 390.589605][T15040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.603586][T15040] dummy0: entered promiscuous mode [ 390.618096][T15040] nlmon0: entered promiscuous mode [ 390.625425][T15040] batadv0: entered promiscuous mode [ 390.632923][T15040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.641528][T15040] vxcan0: entered promiscuous mode [ 390.648395][T15040] vxcan1: entered promiscuous mode [ 390.655225][T15040] veth0: entered promiscuous mode [ 390.662342][T15040] veth1: entered promiscuous mode [ 390.669473][T15040] wg0: entered promiscuous mode [ 390.677341][T15040] wg1: entered promiscuous mode [ 390.685424][T15040] wg2: entered promiscuous mode [ 390.692213][T15040] veth0_to_bridge: entered promiscuous mode [ 390.704859][T15040] bridge_slave_0: entered promiscuous mode [ 390.712690][T15040] veth1_to_bridge: entered promiscuous mode [ 390.722965][T15040] bridge_slave_1: entered promiscuous mode [ 390.732171][T15040] veth0_to_bond: entered promiscuous mode [ 390.739813][T15040] veth1_to_bond: entered promiscuous mode [ 390.747207][T15040] veth1_to_team: entered promiscuous mode [ 390.757280][T15040] veth0_to_batadv: entered promiscuous mode [ 390.764866][T15040] batadv_slave_0: entered promiscuous mode [ 390.774338][T15040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.782093][T15040] veth1_to_batadv: entered promiscuous mode [ 390.788945][T15040] batadv_slave_1: entered promiscuous mode [ 390.796548][T15040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.804577][T15040] xfrm0: entered promiscuous mode [ 390.810890][T15040] veth0_to_hsr: entered promiscuous mode [ 390.817543][T15040] hsr_slave_0: entered promiscuous mode [ 390.824518][T15040] veth1_to_hsr: entered promiscuous mode [ 390.831301][T15040] hsr_slave_1: entered promiscuous mode [ 390.837517][T15040] veth1_virt_wifi: entered promiscuous mode [ 390.845636][T15040] veth0_virt_wifi: entered promiscuous mode [ 390.853632][T15040] virt_wifi0: entered promiscuous mode [ 390.865459][T15040] veth0_vlan: left promiscuous mode [ 390.873085][T15040] veth0_vlan: entered promiscuous mode [ 390.880430][T15040] vlan0: entered promiscuous mode [ 390.886531][T15040] vlan1: entered promiscuous mode [ 390.892694][T15040] macvlan0: entered promiscuous mode [ 390.899864][T15040] macvlan1: entered promiscuous mode [ 390.906362][T15040] ipvlan0: entered promiscuous mode [ 390.912995][T15040] ipvlan1: entered promiscuous mode [ 390.919123][T15040] veth1_macvtap: left promiscuous mode [ 390.924796][T15040] veth1_macvtap: entered promiscuous mode [ 390.931542][T15040] veth0_macvtap: left promiscuous mode [ 390.936995][T15040] veth0_macvtap: entered promiscuous mode [ 390.943878][T15040] macvtap0: entered promiscuous mode [ 390.951723][T15040] macsec0: entered promiscuous mode [ 390.958017][T15040] geneve0: entered promiscuous mode [ 390.966206][T15040] geneve1: entered promiscuous mode [ 390.973480][T15040] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 390.981429][T15040] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 390.991998][T15040] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 390.999757][T15040] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 391.007918][T15040] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 391.015668][T15040] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 391.025946][T15040] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 391.033685][T15040] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 391.041806][T15040] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 391.049647][T15040] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 391.058170][T15040] bridge1: entered promiscuous mode [ 391.065712][T15040] bridge2: entered promiscuous mode [ 391.072775][T15040] macvlan2: entered promiscuous mode [ 391.079408][T15040] bond1: entered promiscuous mode [ 391.085229][T15040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 391.097613][T15040] vti60: entered promiscuous mode [ 391.103823][T15040] bridge0: entered promiscuous mode [ 391.109867][T15040] veth2: entered promiscuous mode [ 391.116014][T15040] veth4: entered promiscuous mode [ 391.122284][T15040] bridge3: entered promiscuous mode [ 391.128184][T15040] bond2: entered promiscuous mode [ 391.133580][T15040] geneve2: entered promiscuous mode [ 391.141353][T15040] mac80211_hwsim hwsim9 dvmrp1: entered promiscuous mode [ 391.148386][T15040] A link change request failed with some changes committed already. Interface dvmrp1 may have been left with an inconsistent configuration, please check. [ 391.207245][ T8167] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 391.227174][ T8167] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 391.243073][ T8167] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 391.253203][ T8167] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 391.476274][T15062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2496'. [ 391.503519][T15062] 8021q: adding VLAN 0 to HW filter on device bond9 [ 391.594122][T15026] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 391.604379][T15035] netlink: 198796 bytes leftover after parsing attributes in process `syz.4.2490'. [ 391.629478][T15035] netlink: 'syz.4.2490': attribute type 2 has an invalid length. [ 391.808206][T15072] netlink: 'syz.4.2501': attribute type 1 has an invalid length. [ 391.858001][T15072] bond11: entered promiscuous mode [ 391.864763][T15072] 8021q: adding VLAN 0 to HW filter on device bond11 [ 391.935082][T15072] 8021q: adding VLAN 0 to HW filter on device bond11 [ 391.942878][T15072] bond11: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 391.954815][T15072] bond11: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 391.968611][T15089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2499'. [ 392.006220][T15072] bond11: (slave ip6gre2): making interface the new active one [ 392.035046][T15072] ip6gre2: entered promiscuous mode [ 392.057360][T15072] bond11: (slave ip6gre2): Enslaving as an active interface with an up link [ 392.649029][T15113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 392.758575][T15123] bond0: entered promiscuous mode [ 392.774585][T15123] bond_slave_0: entered promiscuous mode [ 392.801082][T15123] batadv0: entered promiscuous mode [ 392.819385][T15123] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 392.862577][T15123] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 392.893074][T15123] bond0: left promiscuous mode [ 392.918317][T15123] bond_slave_0: left promiscuous mode [ 392.937986][T15123] batadv0: left promiscuous mode [ 393.207659][T15143] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2515'. [ 393.237726][T15143] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2515'. [ 393.430902][T15160] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2520'. [ 393.631197][T15176] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2524'. [ 393.776740][T15179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2526'. [ 393.826626][T15189] netlink: 'syz.4.2528': attribute type 2 has an invalid length. [ 393.848290][T15175] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 394.037144][T15191] netlink: 'syz.3.2530': attribute type 10 has an invalid length. [ 394.090951][T15196] netlink: 'syz.2.2532': attribute type 1 has an invalid length. [ 394.097273][T15198] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2533'. [ 394.319011][T15196] bond16: entered promiscuous mode [ 394.332715][T15196] 8021q: adding VLAN 0 to HW filter on device bond16 [ 394.345349][T15214] netlink: 'syz.0.2536': attribute type 3 has an invalid length. [ 394.437932][T15207] 8021q: adding VLAN 0 to HW filter on device bond16 [ 394.474184][T15207] bond16: (slave vti0): The slave device specified does not support setting the MAC address [ 394.511730][T15207] bond16: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 394.542415][T15207] bond16: (slave vti0): making interface the new active one [ 394.569241][T15207] vti0: entered promiscuous mode [ 394.592375][T15207] vti0: left promiscuous mode [ 394.737543][T15198] netlink: 'syz.1.2533': attribute type 1 has an invalid length. [ 394.766713][T15216] syzkaller0: entered promiscuous mode [ 394.781395][T15216] syzkaller0: entered allmulticast mode [ 394.898671][T15233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2540'. [ 394.987045][T15237] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2542'. [ 395.027598][T15240] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2544'. [ 395.585759][T15277] netlink: 'syz.2.2555': attribute type 1 has an invalid length. [ 395.740184][T15277] bond17: entered promiscuous mode [ 395.748866][T15277] 8021q: adding VLAN 0 to HW filter on device bond17 [ 395.795062][T15293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2561'. [ 395.904710][T15277] 8021q: adding VLAN 0 to HW filter on device bond17 [ 395.920755][T15277] bond17: (slave vti0): The slave device specified does not support setting the MAC address [ 395.932750][T15277] bond17: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 395.951291][T15277] bond17: (slave vti0): making interface the new active one [ 395.958614][T15277] vti0: entered promiscuous mode [ 395.970016][T15277] vti0: left promiscuous mode [ 396.064545][T15298] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 396.312356][T15324] netlink: 'syz.1.2570': attribute type 11 has an invalid length. [ 396.321443][T15318] syzkaller0: entered promiscuous mode [ 396.333384][T15324] netlink: 'syz.1.2570': attribute type 4 has an invalid length. [ 396.341634][T15318] syzkaller0: entered allmulticast mode [ 396.357375][T15324] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2570'. [ 396.369859][T15318] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 396.379865][T15328] netlink: 'syz.4.2571': attribute type 2 has an invalid length. [ 396.405477][T15324] openvswitch: netlink: Message has 4 unknown bytes. [ 396.412731][T15324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.480369][T15328] : entered promiscuous mode [ 396.543498][T15340] ±ÿª¨úrBº“: left promiscuous mode [ 396.563155][T15340] tunl0: left promiscuous mode [ 396.578531][T15340] gre0: left promiscuous mode [ 396.608131][T15340] gre0: left allmulticast mode [ 396.623507][T15352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2575'. [ 396.678459][T15353] netlink: 'syz.1.2573': attribute type 246 has an invalid length. [ 396.716914][T15340] gretap0: left promiscuous mode [ 396.731167][T15340] erspan0: left promiscuous mode [ 396.736401][T15340] ip_vti0: left promiscuous mode [ 396.754432][T15340] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.761896][T15340] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.771120][T15340] bridge0: left allmulticast mode [ 396.796921][T15340] wg2: left promiscuous mode [ 396.801891][T15340] wg2: left allmulticast mode [ 396.903227][T15340] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 396.922903][T15340] geneve2: left promiscuous mode [ 396.929252][T15340] bond2: left allmulticast mode [ 396.957086][T15340] veth3: left promiscuous mode [ 396.962089][T15340] bond4: left allmulticast mode [ 396.967380][T15340] bridge1: left allmulticast mode [ 396.976848][T15340] ip6gre1: left promiscuous mode [ 396.982243][T15340] ip6gre1: left allmulticast mode [ 396.992800][T15340] gretap1: left promiscuous mode [ 396.997760][T15340] gretap1: left allmulticast mode [ 397.004983][T15340] vlan3: left promiscuous mode [ 397.010406][T15340] bridge0: left promiscuous mode [ 397.016420][T15340] bond7: left promiscuous mode [ 397.021384][T15340] bond7: left allmulticast mode [ 397.027178][T15340] bond8: left promiscuous mode [ 397.032015][T15340] bond8: left allmulticast mode [ 397.037861][T15340] bond9: left promiscuous mode [ 397.043601][T15340] bond9: left allmulticast mode [ 397.049568][T15340] bond10: left promiscuous mode [ 397.054549][T15340] bond10: left allmulticast mode [ 397.060615][T15340] bond11: left promiscuous mode [ 397.065480][T15340] bond11: left allmulticast mode [ 397.072152][T15340] bond12: left promiscuous mode [ 397.077006][T15340] ip6gre2: left promiscuous mode [ 397.084768][T15340] ip6gretap0: left promiscuous mode [ 397.090122][T15340] ip6gretap0: left allmulticast mode [ 397.111429][T15340] vlan0: left allmulticast mode [ 397.116458][T15340] veth0_vlan: left allmulticast mode [ 397.121916][T15340] vlan0: left promiscuous mode [ 397.126800][T15340] veth0_vlan: left promiscuous mode [ 397.133877][T15340] macvtap1: left promiscuous mode [ 397.139084][T15340] macvtap1: left allmulticast mode [ 397.147217][T15340] gtp0: left promiscuous mode [ 397.152282][T15340] gtp0: left allmulticast mode [ 397.224810][ T8164] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 397.275816][ T8164] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.307511][ T8164] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 397.350243][ T8164] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.375754][ T8164] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 397.396947][ T8164] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.439344][ T8164] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 397.472448][ T8164] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.725071][T15388] netlink: 'syz.2.2581': attribute type 3 has an invalid length. [ 398.588945][T15445] __nla_validate_parse: 3 callbacks suppressed [ 398.588962][T15445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2599'. [ 398.838971][T15462] validate_nla: 3 callbacks suppressed [ 398.838990][T15462] netlink: 'syz.1.2602': attribute type 1 has an invalid length. [ 398.968758][T15468] IPv6: Can't replace route, no match found [ 398.992104][T15468] IPv6: Can't replace route, no match found [ 399.015400][T15470] netlink: 'syz.3.2601': attribute type 16 has an invalid length. [ 399.019915][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 399.052719][T15470] netlink: 'syz.3.2601': attribute type 17 has an invalid length. [ 399.096854][T15461] tipc: Cannot configure node identity twice [ 399.170453][T15475] netlink: 'syz.2.2604': attribute type 2 has an invalid length. [ 399.334666][T15470] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 399.365615][T15470] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 399.382555][ T995] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 399.429519][T15455] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 399.626500][T15503] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2609'. [ 399.982531][ T6364] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 400.009836][T15504] syzkaller0: entered promiscuous mode [ 400.038494][T15504] syzkaller0: entered allmulticast mode [ 400.060685][T15521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2613'. [ 400.071153][T15507] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 400.344858][T15549] xt_policy: output policy not valid in PREROUTING and INPUT [ 400.531217][T15558] netlink: 'syz.2.2619': attribute type 1 has an invalid length. [ 400.678948][T15566] pimreg: entered allmulticast mode [ 400.816238][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2623'. [ 400.859522][T15577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2623'. [ 400.921818][T15585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2625'. [ 400.969477][T15587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2625'. [ 400.994289][T15585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2625'. [ 401.010825][T15589] IPv4: Oversized IP packet from 127.202.26.0 [ 401.027190][T15587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2625'. [ 401.092752][T15585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2625'. [ 401.125693][ T8164] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.158695][ T8164] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.223428][ T8164] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.286913][ T8164] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.301441][T15609] netlink: 'syz.1.2627': attribute type 21 has an invalid length. [ 401.328713][T15607] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 401.348584][T15609] netlink: 'syz.1.2627': attribute type 5 has an invalid length. [ 401.357631][T15609] netlink: 'syz.1.2627': attribute type 6 has an invalid length. [ 401.786944][T15644] netlink: 'syz.0.2637': attribute type 1 has an invalid length. [ 401.954442][T15638] bond1 (unregistering): Released all slaves [ 404.041789][T15595] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 404.248715][T15680] __nla_validate_parse: 9 callbacks suppressed [ 404.248733][T15680] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2642'. [ 404.322923][T15686] netlink: 'syz.4.2645': attribute type 3 has an invalid length. [ 404.350762][T15686] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2645'. [ 404.677434][T15707] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2647'. [ 404.720926][T15707] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2647'. [ 404.822896][T15715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 405.343292][T15743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2660'. [ 405.396367][T15743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2660'. [ 405.608170][T15758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2665'. [ 405.634924][T15758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.656993][T15760] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2666'. [ 405.697544][T15758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2665'. [ 405.956413][T15775] tipc: Started in network mode [ 405.969417][T15775] tipc: Node identity 2003, cluster identity 4711 [ 406.007260][T15775] tipc: Node number set to 8195 [ 406.112878][T15788] IPVS: length: 24 != 12582936 [ 406.241420][T15790] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 406.309980][T15799] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2677'. [ 406.721811][T15832] gretap1: entered promiscuous mode [ 406.747464][T15832] batman_adv: batadv0: Adding interface: gretap1 [ 406.773970][T15832] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 406.798523][T15837] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 406.798549][T15832] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 407.214729][T15859] team0 (unregistering): Port device team_slave_1 removed [ 407.324671][ T8164] smbdirect: ib_dev[syz1] removed [ 408.244429][T15912] ipvlan2: entered promiscuous mode [ 408.423525][T15929] netlink: 'syz.2.2716': attribute type 32 has an invalid length. [ 408.489522][T15929] bond19: option coupled_control: invalid value (128) [ 408.515602][T15929] bond19 (unregistering): Released all slaves [ 408.643454][T15943] pimreg3: entered allmulticast mode [ 408.975487][T15946] IPVS: set_ctl: invalid protocol: 47 100.1.1.2:20003 [ 409.087938][ T8169] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.103423][T15964] openvswitch: netlink: Duplicate key (type 6). [ 409.115970][ T8169] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.139122][T15969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.161640][ T8169] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.181161][ T8169] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.198465][ T50] Bluetooth: hci4: link tx timeout [ 409.206632][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 409.330148][T15980] __nla_validate_parse: 13 callbacks suppressed [ 409.330166][T15980] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2730'. [ 409.353195][T15980] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2730'. [ 409.362749][T15979] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2730'. [ 409.372780][T15979] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2730'. [ 409.663396][T15999] syzkaller1: entered promiscuous mode [ 409.676494][T15999] syzkaller1: entered allmulticast mode [ 409.853543][T16006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2737'. [ 409.913364][T16012] bond12: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 409.935319][T16012] bond12 (unregistering): Released all slaves [ 410.145922][T16024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2741'. [ 410.178612][T16024] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2741'. [ 410.235804][T16031] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2740'. [ 410.256626][T16029] netlink: 'syz.1.2741': attribute type 83 has an invalid length. [ 410.297994][T16024] gretap2: entered promiscuous mode [ 410.311786][T16036] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2741'. [ 410.328025][T16024] gretap2: entered allmulticast mode [ 410.355995][T16033] bond0: option miimon: invalid value (18446744071829782528) [ 410.371783][T16033] bond0: option miimon: allowed values 0 - 2147483647 [ 410.974092][T16072] macvlan0: entered promiscuous mode [ 411.175388][T16079] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2754'. [ 411.260511][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 411.386483][T16086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.593569][T16093] gtp2: entered allmulticast mode [ 411.603104][T16093] gtp2: entered promiscuous mode [ 411.609469][T16093] team0: Device gtp2 is of different type [ 411.652564][T16095] tipc: Enabled bearer , priority 0 [ 411.667789][T16095] syzkaller0: entered promiscuous mode [ 411.679081][T16095] syzkaller0: entered allmulticast mode [ 411.766179][T16098] tipc: Resetting bearer [ 411.856748][T16095] tipc: Resetting bearer [ 411.911720][T16095] tipc: Disabling bearer [ 412.189238][T16118] netlink: 'syz.1.2764': attribute type 83 has an invalid length. [ 412.520924][T16135] netlink: 'syz.4.2769': attribute type 1 has an invalid length. [ 412.907496][T16159] nbd: nbd2 already in use [ 413.138866][T16167] 8021q: adding VLAN 0 to HW filter on device bond11 [ 413.204521][T16170] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 414.403972][T16236] netlink: 'syz.1.2798': attribute type 33 has an invalid length. [ 414.544631][T16246] netlink: 'syz.4.2799': attribute type 11 has an invalid length. [ 414.547438][T16245] 8021q: adding VLAN 0 to HW filter on device bond19 [ 414.756751][T16215] __nla_validate_parse: 11 callbacks suppressed [ 414.756771][T16215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2790'. [ 415.776490][T16314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2814'. [ 415.947934][T16308] bond12: entered promiscuous mode [ 415.991323][T16314] bridge7: entered promiscuous mode [ 416.016702][T16314] bridge7: entered allmulticast mode [ 416.230703][T16327] tipc: Enabled bearer , priority 10 [ 416.268456][T16327] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2817'. [ 416.296264][T16329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2818'. [ 416.777688][T16341] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2820'. [ 416.906660][T16347] vlan2: entered allmulticast mode [ 416.923350][T16347] erspan0: entered allmulticast mode [ 417.098088][T16357] syzkaller0: entered promiscuous mode [ 417.121814][T16357] syzkaller0: entered allmulticast mode [ 417.417044][T16376] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2827'. [ 418.119562][T16396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2831'. [ 418.149960][T16396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2831'. [ 419.847519][T16354] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 419.948665][T16409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2834'. [ 419.970090][T16409] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2834'. [ 420.118055][T16418] netlink: 'syz.0.2838': attribute type 18 has an invalid length. [ 420.156052][T16418] netlink: 'syz.0.2838': attribute type 18 has an invalid length. [ 420.288972][T16418] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.395397][T16443] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 421.520808][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 421.538483][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 421.549524][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 421.559433][T16502] batadv_slave_1: entered promiscuous mode [ 421.575779][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 421.588608][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 421.793810][T16502] bond20: invalid ARP target 0.0.0.0 specified for addition [ 421.821607][T16502] bond20: option arp_ip_target: invalid value (0) [ 421.852612][T16502] bond20 (unregistering): Released all slaves [ 422.012744][T16513] veth11: entered allmulticast mode [ 422.044493][T16501] batadv_slave_1: left promiscuous mode [ 422.177551][ T5288] netdevsim netdevsim0 netdevsim3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 422.211237][T16527] netlink: 516 bytes leftover after parsing attributes in process `syz.2.2861'. [ 422.211870][T16525] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2860'. [ 422.223084][T16527] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2861'. [ 422.254046][ T5288] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 422.358560][T16536] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2862'. [ 422.437616][T16538] xt_NFQUEUE: number of total queues is 0 [ 422.440535][T16540] netlink: 'syz.4.2865': attribute type 1 has an invalid length. [ 422.458748][T16542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2862'. [ 422.514662][T16538] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 422.522704][T16544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2864'. [ 422.597205][T16540] 8021q: adding VLAN 0 to HW filter on device bond12 [ 422.675434][T16500] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 422.830663][T16561] vlan4: entered promiscuous mode [ 422.835826][T16561] geneve1: entered promiscuous mode [ 422.841490][T16561] vlan4: entered allmulticast mode [ 422.847407][T16561] geneve1: entered allmulticast mode [ 423.069271][T16574] syzkaller0: entered promiscuous mode [ 423.076349][T16574] syzkaller0: entered allmulticast mode [ 423.193022][T16586] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2877'. [ 423.209571][T16586] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2877'. [ 423.504089][T16500] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.523022][T16500] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.553153][T16500] bridge_slave_0: entered allmulticast mode [ 423.584766][T16500] bridge_slave_0: entered promiscuous mode [ 423.623541][T16500] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.631674][T16500] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.642825][T16500] bridge_slave_1: entered allmulticast mode [ 423.660506][ T4943] Bluetooth: hci5: command tx timeout [ 423.662649][T16500] bridge_slave_1: entered promiscuous mode [ 423.826827][T16500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.845202][T16500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.888478][T16623] netlink: 'syz.4.2889': attribute type 21 has an invalid length. [ 423.916990][T16634] --map-set only usable from mangle table [ 423.921424][T16625] netlink: 'syz.4.2889': attribute type 21 has an invalid length. [ 423.949157][T16623] netlink: 'syz.4.2889': attribute type 6 has an invalid length. [ 423.962864][T16625] netlink: 'syz.4.2889': attribute type 6 has an invalid length. [ 423.975480][T16500] team0: Port device team_slave_0 added [ 423.992147][T16500] team0: Port device team_slave_1 added [ 424.156548][T16500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.165708][T16500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.194016][T16500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.229273][T16500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.246644][T16500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.253953][T16640] netlink: 'syz.2.2893': attribute type 11 has an invalid length. [ 424.274018][T16500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.398779][T16500] hsr_slave_0: entered promiscuous mode [ 424.431735][T16500] hsr_slave_1: entered promiscuous mode [ 424.783167][T16500] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.879370][T16500] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.739806][ T4943] Bluetooth: hci5: command tx timeout [ 427.043116][T16638] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 427.073773][T16500] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 427.134040][T16500] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 427.161829][T16500] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 427.206819][T16693] __nla_validate_parse: 6 callbacks suppressed [ 427.206836][T16693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2900'. [ 427.240158][T16500] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 427.264422][T16500] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 427.276678][T16500] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 427.293243][T16500] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 427.336536][T16500] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 427.559235][T16500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.572996][T16719] netlink: 'syz.3.2906': attribute type 11 has an invalid length. [ 427.606129][T16500] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.647814][ T8164] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.655140][ T8164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.709445][ T8164] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.716648][ T8164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.821204][ T4943] Bluetooth: hci5: command tx timeout [ 428.322986][T16757] ip6erspan2: entered allmulticast mode [ 428.363120][T16751] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 428.405313][T16751] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.785538][T16500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.822107][T16785] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2923'. [ 428.849277][T16785] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2923'. [ 428.864257][T16787] x_tables: unsorted underflow at hook 1 [ 428.926958][T16500] veth0_vlan: entered promiscuous mode [ 428.975643][T16500] veth1_vlan: entered promiscuous mode [ 429.065169][T16799] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2928'. [ 429.099004][T16500] veth0_macvtap: entered promiscuous mode [ 429.161720][T16500] veth1_macvtap: entered promiscuous mode [ 429.164794][T16806] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2930'. [ 429.182696][T16500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.210647][T16500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.229869][T16808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2930'. [ 429.255182][ T8171] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.266438][ T8171] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.345112][T16814] netlink: 'syz.3.2932': attribute type 2 has an invalid length. [ 429.348303][T16808] bond13: entered promiscuous mode [ 429.370858][T16808] 8021q: adding VLAN 0 to HW filter on device bond13 [ 429.389498][ T8171] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.422760][ T8171] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.717801][ T8164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.734800][ T8164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.791994][T16825] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2936'. [ 429.808610][ T8168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.824436][ T8168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.902434][ T4943] Bluetooth: hci5: command tx timeout [ 429.990853][T16835] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 430.455639][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 430.472711][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 430.481689][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 430.492523][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 430.502628][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 430.779433][ T5638] team0: Port device syz_tun removed [ 430.994371][ T8165] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.021131][ T8165] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.041686][ T8165] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 431.144287][T16885] netlink: 'syz.0.2953': attribute type 3 has an invalid length. [ 431.204385][ T8165] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.227895][ T8165] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.245214][ T8165] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 431.427974][T16900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2956'. [ 431.437972][T16900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2956'. [ 432.545826][ T4943] Bluetooth: hci0: command tx timeout [ 433.318010][T16907] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 433.345908][ T8165] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.365958][ T8165] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.426784][ T8165] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 433.487514][T16857] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 433.686260][ T8165] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.729512][ T8165] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.750535][ T8165] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 433.969023][T16944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.992030][T16948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2966'. [ 434.019830][T16948] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2966'. [ 434.328324][T16954] tipc: Enabling of bearer rejected, already enabled [ 434.614578][ T8165] pimreg3: left allmulticast mode [ 434.621168][ T4943] Bluetooth: hci0: command tx timeout [ 434.921536][T16986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2972'. [ 435.036067][ T8165] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 435.265292][ T8165] bond3 (unregistering): (slave geneve4): Releasing active interface [ 435.385706][ T8165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.395436][ T8165] bond_slave_0: left allmulticast mode [ 435.406860][ T8165] bond0 (unregistering): (slave bond8): Releasing backup interface [ 435.416035][ T8165] bond8 (unregistering): left allmulticast mode [ 435.423328][ T8165] bond0 (unregistering): Released all slaves [ 435.437072][ T8165] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 435.447533][ T8165] bond1 (unregistering): Released all slaves [ 435.463273][ T8165] bond2 (unregistering): Released all slaves [ 435.478641][ T8165] bond3 (unregistering): Released all slaves [ 435.497227][ T8165] bond4 (unregistering): Released all slaves [ 435.511200][ T8165] bond5 (unregistering): Released all slaves [ 435.526035][ T8165] bond6 (unregistering): Released all slaves [ 435.541091][ T8165] bond7 (unregistering): Released all slaves [ 435.563304][ T8165] bond8 (unregistering): Released all slaves [ 435.577031][ T8165] bond9 (unregistering): Released all slaves [ 435.612047][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 435.842609][T17008] xt_hashlimit: size too large, truncated to 1048576 [ 435.847248][ T8165] : left promiscuous mode [ 436.160327][T17019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2979'. [ 436.308077][T17019] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 436.321194][ T8165] tipc: Left network mode [ 436.405224][T16857] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.425064][T17026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2981'. [ 436.425826][T16857] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.447796][T16857] bridge_slave_0: entered allmulticast mode [ 436.457053][T16857] bridge_slave_0: entered promiscuous mode [ 436.481192][T16857] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.488487][T16857] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.496422][T16857] bridge_slave_1: entered allmulticast mode [ 436.505816][T16857] bridge_slave_1: entered promiscuous mode [ 436.598900][T17023] syzkaller0: entered promiscuous mode [ 436.604952][T17023] syzkaller0: entered allmulticast mode [ 436.700055][ T4943] Bluetooth: hci0: command tx timeout [ 436.750833][T16857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.787647][T17043] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2983'. [ 436.820096][T17045] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2984'. [ 436.929542][T16857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.087971][T16857] team0: Port device team_slave_0 added [ 437.109148][T16857] team0: Port device team_slave_1 added [ 437.163460][T17061] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2986'. [ 437.401492][T16857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.428234][T16857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.508666][T16857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.589108][ T8167] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.628347][T16857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.663487][T16857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.733143][T16857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.855722][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 438.074105][T16857] hsr_slave_0: entered promiscuous mode [ 438.081942][T16857] hsr_slave_1: entered promiscuous mode [ 438.088459][T16857] debugfs: 'hsr0' already exists in 'hsr' [ 438.094860][T16857] Cannot create hsr debugfs directory [ 438.153509][ T8165] hsr_slave_0: left promiscuous mode [ 438.169372][ T8165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.198315][ T8165] batadv0: mtu less than device minimum [ 438.220802][ T8165] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.234192][ T8165] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.246002][ T8165] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.257815][ T8165] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.269549][ T8165] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.282858][ T8165] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.294646][ T8165] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.306516][ T8165] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.341962][ T8165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.358948][ T8165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.368400][T17127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3004'. [ 438.419771][ T29] audit: type=1804 audit(1783322581.351:6): pid=17123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3005" name="/newroot/640/cgroup.controllers" dev="tmpfs" ino=3282 res=1 errno=0 [ 438.451999][T17130] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3004'. [ 438.468603][ T8165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.478938][ T29] audit: type=1800 audit(1783322581.351:7): pid=17123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3005" name="cgroup.controllers" dev="tmpfs" ino=3282 res=0 errno=0 [ 438.507379][ T8165] batman_adv: batadv0: Interface deactivated: dummy0 [ 438.514374][ T8165] batman_adv: batadv0: Removing interface: dummy0 [ 438.540805][ T8165] veth0_macvtap: left promiscuous mode [ 438.557840][ T8165] veth1_vlan: left promiscuous mode [ 438.569885][ T8165] veth0_vlan: left promiscuous mode [ 438.780158][ T4943] Bluetooth: hci0: command tx timeout [ 439.087864][ T8165] team0 (unregistering): Port device team_slave_1 removed [ 439.118994][ T8165] team0 (unregistering): Port device team_slave_0 removed [ 439.346355][T17143] bond14: entered promiscuous mode [ 439.352469][T17143] 8021q: adding VLAN 0 to HW filter on device bond14 [ 439.388564][T17158] bridge14: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 439.413276][T17157] bridge15: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 439.684648][T17165] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 439.983072][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.122547][ T8165] IPVS: stop unused estimator thread 0... [ 440.641331][T17217] __nla_validate_parse: 3 callbacks suppressed [ 440.641343][T17217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3021'. [ 441.807185][T17248] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3032'. [ 441.853032][T17248] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3032'. [ 441.968213][T17259] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 442.007678][T17259] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 442.104513][T17266] bond15: Unable to set up delay as MII monitoring is disabled [ 442.123209][T17266] bond15 (unregistering): Released all slaves [ 442.123557][T17273] ipt_rpfilter: unknown options [ 442.279577][T17280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3038'. [ 442.315143][T17267] bond15: Unable to set up delay as MII monitoring is disabled [ 442.328067][T17267] bond15 (unregistering): Released all slaves [ 442.365253][T17285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3038'. [ 442.515854][T17280] ip6erspan1: entered promiscuous mode [ 442.543362][T17285] vcan0: entered promiscuous mode [ 442.726850][T17302] x_tables: duplicate underflow at hook 1 [ 442.743283][T16857] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 442.792702][T16857] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 442.842689][T16857] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 442.854647][T17307] Unsupported ieee802154 address type: 0 [ 442.864958][T17307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3046'. [ 442.877845][T16857] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 442.879770][T17309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3045'. [ 442.887717][T16857] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 442.910619][T17309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3045'. [ 442.936796][T17309] netlink: 'syz.4.3045': attribute type 14 has an invalid length. [ 442.938103][T16857] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 442.954785][ T8171] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.956314][T17309] netlink: 'syz.4.3045': attribute type 13 has an invalid length. [ 442.971546][ T8171] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.971588][ T8171] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.990373][T16857] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 443.006637][T16857] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 443.027028][T17314] hsr0: entered promiscuous mode [ 443.279001][T16857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.336632][T16857] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.349547][T17336] netlink: 'syz.1.3051': attribute type 5 has an invalid length. [ 443.394141][ T8171] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.401372][ T8171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.412052][T17340] netlink: 'syz.4.3052': attribute type 4 has an invalid length. [ 443.441818][ T8168] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.449051][ T8168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.911497][T17370] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3056'. [ 444.242824][T17386] vcan0: left promiscuous mode [ 444.263007][T17386] net_ratelimit: 31 callbacks suppressed [ 444.263028][T17386] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 444.441379][T17394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3063'. [ 444.838644][T17425] x_tables: unsorted entry at hook 3 [ 445.040486][T16857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.210998][T16857] veth0_vlan: entered promiscuous mode [ 445.263377][T16857] veth1_vlan: entered promiscuous mode [ 445.294477][T17448] Bluetooth: hci1: too big key_count value 32778 [ 445.487903][T16857] veth0_macvtap: entered promiscuous mode [ 445.509957][T16857] veth1_macvtap: entered promiscuous mode [ 445.533452][T16857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.571066][T16857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.635287][ T8167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.666441][ T8167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.702935][ T8167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.746643][ T8167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.028244][ T8171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.074597][ T8171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.258557][ T8162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.261506][T17500] __nla_validate_parse: 8 callbacks suppressed [ 446.261523][T17500] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3089'. [ 446.297236][ T8162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.348160][T17507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3091'. [ 446.398657][T17494] syzkaller0: entered promiscuous mode [ 446.415552][T17494] syzkaller0: entered allmulticast mode [ 446.525558][T17516] nbd: must specify at least one socket [ 446.724455][T17523] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2944'. [ 446.817579][T17528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3095'. [ 447.159319][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 447.174952][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 447.183696][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 447.202450][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 447.215425][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 449.341992][ T50] Bluetooth: hci4: command tx timeout [ 449.549544][T17575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3105'. [ 449.612870][T17580] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3106'. [ 449.687266][T17580] netlink: 'syz.3.3106': attribute type 1 has an invalid length. [ 449.706485][T17575] bond20: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 449.765520][T17575] bond20 (unregistering): Released all slaves [ 449.879932][T17584] vlan2: entered promiscuous mode [ 449.909199][T17584] ip6gretap0: entered promiscuous mode [ 449.953323][T17584] vlan2: entered allmulticast mode [ 449.987400][T17584] ip6gretap0: entered allmulticast mode [ 450.186329][T17605] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.3110'. [ 450.247185][T17538] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 450.420950][T17617] netlink: 'syz.0.3113': attribute type 1 has an invalid length. [ 450.442724][T17623] xt_TCPMSS: Only works on TCP SYN packets [ 450.473058][T17623] xfrm0 speed is unknown, defaulting to 1000 [ 450.477709][T17617] netlink: 'syz.0.3113': attribute type 3 has an invalid length. [ 450.527862][T17617] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3113'. [ 450.561182][T17620] netlink: 'syz.3.3114': attribute type 1 has an invalid length. [ 450.606080][T17620] netlink: 756 bytes leftover after parsing attributes in process `syz.3.3114'. [ 450.629316][T17623] xfrm0 speed is unknown, defaulting to 1000 [ 450.661279][T17623] xfrm0 speed is unknown, defaulting to 1000 [ 450.711448][T17623] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 450.790713][T17623] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 450.846015][T17623] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 450.897159][T17623] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 451.186987][T17654] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3119'. [ 451.278097][T17648] team0: Device 26±ÿª¨úrBº“ is loopback device. Loopback devices can't be added as a team port [ 451.288984][T17623] xfrm0 speed is unknown, defaulting to 1000 [ 451.300747][T17648] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 451.353725][T17664] veth0_to_bond: entered promiscuous mode [ 451.365857][T17664] veth0_to_bond: entered allmulticast mode [ 451.384599][T17623] xfrm0 speed is unknown, defaulting to 1000 [ 451.435209][ T50] Bluetooth: hci4: command tx timeout [ 451.451321][T17623] xfrm0 speed is unknown, defaulting to 1000 [ 451.514778][T17623] xfrm0 speed is unknown, defaulting to 1000 [ 451.590836][T17623] xfrm0 speed is unknown, defaulting to 1000 [ 451.647707][T17623] xfrm0 speed is unknown, defaulting to 1000 [ 451.658401][T17674] netlink: 'syz.2.3120': attribute type 1 has an invalid length. [ 451.695234][T17623] xfrm0 speed is unknown, defaulting to 1000 [ 451.921190][T17687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3122'. [ 451.945781][T17538] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.967801][T17538] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.990627][T17674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3120'. [ 452.006059][T17538] bridge_slave_0: entered allmulticast mode [ 452.045395][T17538] bridge_slave_0: entered promiscuous mode [ 452.072743][T17538] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.096125][T17538] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.114043][T17538] bridge_slave_1: entered allmulticast mode [ 452.137001][T17538] bridge_slave_1: entered promiscuous mode [ 452.304930][T17538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.345264][T17538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.485190][T17721] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3130'. [ 452.516933][T17538] team0: Port device team_slave_0 added [ 452.555244][T17538] team0: Port device team_slave_1 added [ 452.760264][T17538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.775583][T17538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.810517][T17538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.846244][ T6364] IPVS: starting estimator thread 0... [ 452.847865][T17744] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 452.861033][T17538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.894877][T17538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.928686][T17538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.950732][T17745] IPVS: using max 31 ests per chain, 74400 per kthread [ 452.975425][T17747] xt_TCPMSS: Only works on TCP SYN packets [ 452.994824][T17747] macvtap0: entered allmulticast mode [ 453.009729][T17747] veth0_macvtap: entered allmulticast mode [ 453.150283][T17538] hsr_slave_0: entered promiscuous mode [ 453.167877][T17538] hsr_slave_1: entered promiscuous mode [ 453.187631][T17538] debugfs: 'hsr0' already exists in 'hsr' [ 453.206379][T17538] Cannot create hsr debugfs directory [ 453.290854][T17776] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3142'. [ 453.499786][ T50] Bluetooth: hci4: command tx timeout [ 453.662098][T17792] bond2: entered allmulticast mode [ 453.675633][T17792] 8021q: adding VLAN 0 to HW filter on device bond2 [ 453.788028][T17798] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 453.833092][T17798] macvlan2: entered allmulticast mode [ 453.842733][T17798] bond0: entered allmulticast mode [ 453.868701][T17798] bond_slave_0: entered allmulticast mode [ 453.892795][ T8171] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 453.918102][T17798] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 454.008296][ T8162] bond2: (slave macvlan2): link status up again after 0 ms [ 454.029905][ T8162] bond2: (slave macvlan2): failed to get link speed/duplex [ 454.087860][ T8162] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 454.395789][T17538] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.451782][T17538] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.485333][T17538] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 454.521155][T17830] 8021q: VLANs not supported on ipvlan0 [ 454.540000][ T8162] bond2: (slave macvlan2): failed to get link speed/duplex [ 454.601943][T17847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3162'. [ 454.626304][T17847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3162'. [ 454.753390][T17850] tc_dump_action: action bad kind [ 454.820539][ T8171] bond2: (slave macvlan2): failed to get link speed/duplex [ 455.005852][T17878] netlink: 'syz.0.3167': attribute type 1 has an invalid length. [ 455.041866][T17538] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.069905][T17538] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.090865][T17538] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 455.280722][T17878] 8021q: adding VLAN 0 to HW filter on device bond2 [ 455.409881][T17538] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.439454][T17538] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.465524][T17538] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 455.573275][ T8162] bond2: (slave macvlan2): failed to get link speed/duplex [ 455.581364][ T50] Bluetooth: hci4: command tx timeout [ 455.757572][T17538] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.770061][T17538] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.783704][T17538] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 455.820261][ T8167] bond2: (slave macvlan2): failed to get link speed/duplex [ 455.909020][T17538] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 455.919357][T17538] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 455.928151][T17538] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 455.937151][T17538] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 455.945284][T17538] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 455.955723][T17538] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 455.964181][T17538] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 455.993171][T17538] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 456.010988][ T8167] bond2: (slave macvlan2): failed to get link speed/duplex [ 456.035869][T17918] x_tables: duplicate entry at hook 3 [ 456.387498][T17944] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3188'. [ 456.411554][T17538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.444145][T17944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.466213][T17538] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.501360][ T8165] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.508574][ T8165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.572097][ T8165] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.579384][ T8165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.618442][T17955] netlink: 'syz.4.3191': attribute type 1 has an invalid length. [ 456.668255][T17955] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3191'. [ 456.680203][ T8167] net_ratelimit: 2 callbacks suppressed [ 456.680219][ T8167] bond2: (slave macvlan2): failed to get link speed/duplex [ 456.696974][T17955] 8021q: adding VLAN 0 to HW filter on device bond15 [ 456.840510][ T8164] bond2: (slave macvlan2): failed to get link speed/duplex [ 456.853242][T17960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.990222][ T8166] bond2: (slave macvlan2): failed to get link speed/duplex [ 457.120233][ T8162] bond2: (slave macvlan2): failed to get link speed/duplex [ 457.131575][T17982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3199'. [ 457.163668][T17982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3199'. [ 457.251742][ T8165] bond2: (slave macvlan2): failed to get link speed/duplex [ 457.390607][ T8165] bond2: (slave macvlan2): failed to get link speed/duplex [ 457.510793][ T8162] bond2: (slave macvlan2): failed to get link speed/duplex [ 457.622625][T18005] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 457.648841][ T8164] bond2: (slave macvlan2): failed to get link speed/duplex [ 457.712679][T17538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.952400][T17538] veth0_vlan: entered promiscuous mode [ 457.987110][T17538] veth1_vlan: entered promiscuous mode [ 458.093680][T17538] veth0_macvtap: entered promiscuous mode [ 458.121351][ T8165] bond2: (slave macvlan2): failed to get link speed/duplex [ 458.142306][ T8168] bond0: (slave bond_slave_0): interface is now down [ 458.144335][T17538] veth1_macvtap: entered promiscuous mode [ 458.176760][ T8168] bond0: (slave bond_slave_1): interface is now down [ 458.189203][T18034] netlink: 'syz.4.3210': attribute type 20 has an invalid length. [ 458.199288][T18034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3210'. [ 458.212306][ T8168] bond0: now running without any active interface! [ 458.283901][T18034] netlink: 'syz.4.3210': attribute type 20 has an invalid length. [ 458.296330][T18034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3210'. [ 458.313913][T17538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.355551][T17538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.390639][ T8162] bond2: (slave macvlan2): failed to get link speed/duplex [ 458.413909][ T8162] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.424020][ T8162] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.437426][T18043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3213'. [ 458.446992][ T8162] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.450914][T18044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3213'. [ 458.474595][ T8162] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.639523][ T8162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.648129][ T8162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.686366][T18052] ipvlan4: entered promiscuous mode [ 458.700806][ T8168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.708756][ T8168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.829100][T18057] tipc: Enabling of bearer rejected, media not registered [ 459.169614][T18060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3218'. [ 459.247731][ T4943] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 459.258611][ T4943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 459.272636][ T4943] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 459.291808][ T4943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 459.299594][ T4943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 459.656608][T18081] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3222'. [ 459.882571][T18098] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3226'. [ 459.968574][T18094] syzkaller0: entered promiscuous mode [ 459.988342][T18094] syzkaller0: entered allmulticast mode [ 460.024355][T18102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3229'. [ 460.062334][T18068] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 460.070617][T18103] netlink: 'syz.1.3228': attribute type 1 has an invalid length. [ 460.083399][T18068] xfrm0 speed is unknown, defaulting to 1000 [ 460.148347][T18103] macvlan2: entered promiscuous mode [ 460.163990][T18103] macvlan2: entered allmulticast mode [ 460.227145][T18113] IPVS: set_ctl: invalid protocol: 29 172.30.1.1:20001 [ 460.237612][T18113] IPVS: set_ctl: invalid protocol: 29 172.30.1.1:20001 [ 460.248607][T18113] IPVS: set_ctl: invalid protocol: 29 172.30.1.1:20001 [ 460.262222][T18113] IPVS: set_ctl: invalid protocol: 29 172.30.1.1:20001 [ 460.280669][T18113] IPVS: set_ctl: invalid protocol: 29 172.30.1.1:20001 [ 460.455788][T18127] Bluetooth: MGMT ver 1.23 [ 460.624704][T18140] netlink: 'syz.2.3238': attribute type 21 has an invalid length. [ 460.642299][T18140] IPv6: NLM_F_CREATE should be specified when creating new route [ 460.750662][T18140] veth7: entered allmulticast mode [ 460.776696][T18142] erspan0: entered allmulticast mode [ 460.839146][T18142] netlink: 'syz.3.3237': attribute type 1 has an invalid length. [ 460.949741][T18171] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 460.958710][T18171] batman_adv: batadv0: Adding interface: netdevsim0 [ 460.966872][T18171] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.998600][T18171] batman_adv: batadv0: Interface activated: netdevsim0 [ 461.032189][T18174] netlink: 'syz.2.3245': attribute type 1 has an invalid length. [ 461.046494][T18068] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.066464][T18068] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.075510][T18068] bridge_slave_0: entered allmulticast mode [ 461.090380][T18068] bridge_slave_0: entered promiscuous mode [ 461.116751][T18068] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.135940][T18068] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.150470][T18068] bridge_slave_1: entered allmulticast mode [ 461.157975][T18180] IPVS: set_ctl: invalid protocol: 44 10.1.1.0:20003 [ 461.168016][T18068] bridge_slave_1: entered promiscuous mode [ 461.275523][T18068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.294250][T18068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.341073][ T50] Bluetooth: hci2: command tx timeout [ 461.451659][T18068] team0: Port device team_slave_0 added [ 461.466928][T18068] team0: Port device team_slave_1 added [ 461.531299][T18206] netlink: 'syz.1.3255': attribute type 6 has an invalid length. [ 461.562600][T18068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.584913][T18068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.624651][T18068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.638396][T18068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.647853][T18068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.675999][T18068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.800703][ T8164] net_ratelimit: 18 callbacks suppressed [ 461.800722][ T8164] bond2: (slave macvlan2): failed to get link speed/duplex [ 461.893225][T18068] hsr_slave_0: entered promiscuous mode [ 461.914504][T18068] hsr_slave_1: entered promiscuous mode [ 461.928590][T18068] debugfs: 'hsr0' already exists in 'hsr' [ 461.934793][T18068] Cannot create hsr debugfs directory [ 462.097351][T18230] netlink: 'syz.1.3261': attribute type 58 has an invalid length. [ 462.305222][ T8168] bond2: (slave macvlan2): failed to get link speed/duplex [ 462.319373][T18243] xt_connbytes: Forcing CT accounting to be enabled [ 462.339946][T18243] Cannot find set identified by id 65534 to match [ 462.368161][T18243] __nla_validate_parse: 10 callbacks suppressed [ 462.368179][T18243] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3266'. [ 462.485544][T18068] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.497911][T18068] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 462.509364][T18068] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 462.559902][ T8168] bond2: (slave macvlan2): failed to get link speed/duplex [ 462.602125][T18068] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.615363][T18068] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 462.626499][T18068] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 462.772676][T18263] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.780378][T18263] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.842308][T18263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.857868][T18263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.958014][ T8165] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.971911][ T8165] bond2: (slave macvlan2): failed to get link speed/duplex [ 463.006332][T18068] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.019116][T18068] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 463.033564][T18068] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 463.073542][ T8164] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.098289][ T8164] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.119557][ T8164] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.162786][T18068] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.175827][T18068] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 463.188287][T18068] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 463.240777][ T8164] bond2: (slave macvlan2): failed to get link speed/duplex [ 463.402987][T18277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3277'. [ 463.421557][ T50] Bluetooth: hci2: command tx timeout [ 463.445660][T18277] netlink: 'syz.2.3277': attribute type 1 has an invalid length. [ 463.459884][T18277] netlink: 'syz.2.3277': attribute type 2 has an invalid length. [ 463.472184][ T8171] bond2: (slave macvlan2): failed to get link speed/duplex [ 463.573490][T18288] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3280'. [ 463.575563][T18068] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 463.613455][T18068] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 463.626075][T18068] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 463.640829][T18068] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 463.671999][T18068] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 463.684365][T18293] netlink: 'syz.1.3282': attribute type 1 has an invalid length. [ 463.696152][T18068] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 463.729249][T18068] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 463.738580][T18068] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 463.802016][T18307] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3283'. [ 463.841348][ T8168] bond2: (slave macvlan2): failed to get link speed/duplex [ 463.886249][T18309] netlink: 'syz.1.3284': attribute type 58 has an invalid length. [ 463.895274][T18309] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3284'. [ 463.920911][T18068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.943021][T18068] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.958912][ T8166] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.966093][ T8166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.992086][ T8162] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.999315][ T8162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.050489][ T8168] bond2: (slave macvlan2): failed to get link speed/duplex [ 464.071700][T18312] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 464.092725][T18312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3285'. [ 464.162656][ T8162] bond2: (slave macvlan2): failed to get link speed/duplex [ 464.226498][T18320] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3287'. [ 464.306913][T18323] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3288'. [ 464.318158][ T8166] bond2: (slave macvlan2): failed to get link speed/duplex [ 464.571363][T18339] sctp: [Deprecated]: syz.0.3291 (pid 18339) Use of int in maxseg socket option. [ 464.571363][T18339] Use struct sctp_assoc_value instead [ 464.725581][T18347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3294'. [ 464.736605][T18346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3294'. [ 464.817505][T18344] 8021q: adding VLAN 0 to HW filter on device bond20 [ 464.854085][T18350] bond20: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 464.882717][T18068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.914968][T18344] macvlan3: entered promiscuous mode [ 464.931952][T18344] macvlan3: entered allmulticast mode [ 464.942761][T18344] bond20: entered promiscuous mode [ 464.948039][T18344] veth0_to_bond: entered promiscuous mode [ 464.955758][T18344] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 464.965851][T18344] bond20: left promiscuous mode [ 464.972094][T18344] veth0_to_bond: left promiscuous mode [ 465.023238][ T8167] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 465.055010][ T8167] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 465.072366][ T8167] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 465.108717][ T8167] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 465.162672][T18361] veth0: entered promiscuous mode [ 465.258685][T18360] veth0: left promiscuous mode [ 465.439513][T18376] syzkaller0: entered promiscuous mode [ 465.454521][T18376] syzkaller0: entered allmulticast mode [ 465.475664][T18381] validate_nla: 4 callbacks suppressed [ 465.475680][T18381] netlink: 'syz.2.3304': attribute type 10 has an invalid length. [ 465.511499][ T50] Bluetooth: hci2: command tx timeout [ 465.537379][T18383] bond0 (unregistering): left allmulticast mode [ 465.551245][T18383] bond_slave_0: left allmulticast mode [ 465.587447][T18383] bond2: (slave macvlan2): Removing an active aggregator [ 465.610462][T18383] bond2: (slave macvlan2): Releasing backup interface [ 465.637513][T18383] macvlan2 (unregistering): left allmulticast mode [ 465.673826][T18383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.687841][T18383] bond0 (unregistering): Released all slaves [ 465.729215][T18397] netlink: 'syz.0.3308': attribute type 1 has an invalid length. [ 465.742018][T18387] bond1: Removing last ns target with arp_interval on [ 465.887500][T18068] veth0_vlan: entered promiscuous mode [ 465.950954][T18068] veth1_vlan: entered promiscuous mode [ 466.030802][T18068] veth0_macvtap: entered promiscuous mode [ 466.045096][T18068] veth1_macvtap: entered promiscuous mode [ 466.112051][T18068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.147005][T18068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.157080][T18415] netlink: 'syz.2.3314': attribute type 83 has an invalid length. [ 466.187010][ T8167] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.207923][ T8167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.235971][ T8167] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.256664][ T8167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.509341][ T8166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.537473][ T8166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.652577][ T8168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.672517][ T8168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.850035][T18446] netlink: 'syz.3.3321': attribute type 14 has an invalid length. [ 466.982736][T18455] veth1_macvtap: left promiscuous mode [ 467.402904][T18466] __nla_validate_parse: 43 callbacks suppressed [ 467.402924][T18466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3328'. [ 467.442466][ T4943] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 467.454573][T18471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3328'. [ 467.482000][ T4943] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 467.501623][ T4943] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 467.510564][T18476] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3332'. [ 467.524664][ T4943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 467.533501][T18476] 8021q: VLANs not supported on ip_vti0 [ 467.539369][ T4943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 467.580364][ T4943] Bluetooth: hci2: command tx timeout [ 467.838232][ T5632] team0: Port device syz_tun removed [ 467.863825][T18489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3334'. [ 468.432532][T18518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3340'. [ 468.509333][T18473] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 468.525062][T18473] xfrm0 speed is unknown, defaulting to 1000 [ 468.685872][T18489] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 469.064622][T18535] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3343'. [ 469.090914][T18535] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3343'. [ 469.120010][T18535] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3343'. [ 469.152526][T18535] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3343'. [ 469.302800][T18541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3345'. [ 469.508978][T18473] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.547301][T18473] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.580628][ T4943] Bluetooth: hci1: command tx timeout [ 469.589900][T18473] bridge_slave_0: entered allmulticast mode [ 469.621200][T18473] bridge_slave_0: entered promiscuous mode [ 469.652299][T18559] net_ratelimit: 8 callbacks suppressed [ 469.652315][T18559] openvswitch: netlink: Missing key (keys=40, expected=100) [ 469.671271][T18473] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.685595][T18473] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.696031][T18473] bridge_slave_1: entered allmulticast mode [ 469.714816][T18473] bridge_slave_1: entered promiscuous mode [ 469.740307][T18564] openvswitch: netlink: Missing key (keys=40, expected=100) [ 469.873379][T18473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.934664][T18473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.184678][T18473] team0: Port device team_slave_0 added [ 470.204015][T18473] team0: Port device team_slave_1 added [ 470.337666][T18473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.355562][T18473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.429831][T18473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.476551][T18601] netlink: 'syz.1.3360': attribute type 1 has an invalid length. [ 470.491624][T18473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.515332][T18473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.544789][T18473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.787564][T18601] 8021q: adding VLAN 0 to HW filter on device bond2 [ 470.804918][T18607] bond2: (slave batadv1): Opening slave failed [ 470.821022][T18620] block nbd0: reconnected socket [ 470.827325][ T4943] block nbd0: Receive control failed (result -107) [ 470.848826][T18612] syzkaller0: entered promiscuous mode [ 470.872950][T18612] syzkaller0: entered allmulticast mode [ 471.058586][T18620] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 471.069203][T18473] hsr_slave_0: entered promiscuous mode [ 471.086065][T18473] hsr_slave_1: entered promiscuous mode [ 471.094384][T18473] debugfs: 'hsr0' already exists in 'hsr' [ 471.110220][T18473] Cannot create hsr debugfs directory [ 471.564075][T18657] netlink: 'syz.4.3370': attribute type 12 has an invalid length. [ 471.573081][T18657] [ 471.575425][T18657] ====================================================== [ 471.582443][T18657] WARNING: possible circular locking dependency detected [ 471.589478][T18657] syzkaller #0 Not tainted [ 471.593904][T18657] ------------------------------------------------------ [ 471.600922][T18657] syz.4.3370/18657 is trying to acquire lock: [ 471.606984][T18657] ffffffff8ec847a0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x61/0x660 [ 471.616297][T18657] [ 471.616297][T18657] but task is already holding lock: [ 471.623644][T18657] ffff888067fdd530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa40 [ 471.632873][T18657] [ 471.632873][T18657] which lock already depends on the new lock. [ 471.632873][T18657] [ 471.643264][T18657] [ 471.643264][T18657] the existing dependency chain (in reverse order) is: [ 471.652260][T18657] [ 471.652260][T18657] -> #7 (&idev->mc_lock){+.+.}-{4:4}: [ 471.659810][T18657] __mutex_lock+0x19d/0x1550 [ 471.664919][T18657] __ipv6_dev_mc_inc+0x4e/0xa40 [ 471.670288][T18657] __ipv6_sock_mc_join+0x4f7/0x740 [ 471.675914][T18657] ipv6_mcast_join_leave+0x1a2/0x240 [ 471.681718][T18657] do_ipv6_setsockopt+0x1990/0x3180 [ 471.687430][T18657] ipv6_setsockopt+0x59/0x170 [ 471.692619][T18657] do_sock_setsockopt+0x17c/0x1b0 [ 471.698161][T18657] __x64_sys_setsockopt+0x13d/0x1b0 [ 471.703882][T18657] do_syscall_64+0x174/0x580 [ 471.708985][T18657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.715388][T18657] [ 471.715388][T18657] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 471.723110][T18657] lock_sock_nested+0x41/0x100 [ 471.728384][T18657] inet_shutdown+0x6a/0x390 [ 471.733403][T18657] nbd_mark_nsock_dead+0x2cb/0x550 [ 471.739028][T18657] recv_work+0x1cee/0x1e10 [ 471.743955][T18657] process_scheduled_works+0xa8e/0x14e0 [ 471.750013][T18657] worker_thread+0xa47/0xfb0 [ 471.755111][T18657] kthread+0x388/0x470 [ 471.759692][T18657] ret_from_fork+0x514/0xb70 [ 471.764802][T18657] ret_from_fork_asm+0x1a/0x30 [ 471.770076][T18657] [ 471.770076][T18657] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 471.777713][T18657] __mutex_lock+0x19d/0x1550 [ 471.782818][T18657] nbd_queue_rq+0x373/0x1150 [ 471.787922][T18657] blk_mq_dispatch_rq_list+0x499/0x1990 [ 471.793978][T18657] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 471.800822][T18657] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 471.807322][T18657] blk_mq_run_work_fn+0x16c/0x300 [ 471.812857][T18657] process_scheduled_works+0xa8e/0x14e0 [ 471.818915][T18657] worker_thread+0xa47/0xfb0 [ 471.824023][T18657] kthread+0x388/0x470 [ 471.828609][T18657] ret_from_fork+0x514/0xb70 [ 471.833712][T18657] ret_from_fork_asm+0x1a/0x30 [ 471.838985][T18657] [ 471.838985][T18657] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 471.846196][T18657] __mutex_lock+0x19d/0x1550 [ 471.851322][T18657] nbd_queue_rq+0xc1/0x1150 [ 471.856357][T18657] blk_mq_dispatch_rq_list+0x499/0x1990 [ 471.862421][T18657] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 471.869275][T18657] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 471.875781][T18657] blk_mq_run_work_fn+0x16c/0x300 [ 471.881321][T18657] process_scheduled_works+0xa8e/0x14e0 [ 471.887376][T18657] worker_thread+0xa47/0xfb0 [ 471.892477][T18657] kthread+0x388/0x470 [ 471.897063][T18657] ret_from_fork+0x514/0xb70 [ 471.902166][T18657] ret_from_fork_asm+0x1a/0x30 [ 471.907444][T18657] [ 471.907444][T18657] -> #3 (set->srcu){.+.+}-{0:0}: [ 471.914559][T18657] __synchronize_srcu+0xc9/0x2f0 [ 471.920014][T18657] elevator_switch+0x1e8/0x7b0 [ 471.925288][T18657] elevator_change+0x2fa/0x480 [ 471.930563][T18657] elevator_set_default+0x375/0x440 [ 471.936281][T18657] blk_register_queue+0x3f3/0x4e0 [ 471.941819][T18657] __add_disk+0x6cb/0xe30 [ 471.946660][T18657] add_disk_fwnode+0xfb/0x4b0 [ 471.951846][T18657] nbd_dev_add+0x733/0xb60 [ 471.956774][T18657] nbd_init+0x15f/0x1e0 [ 471.961446][T18657] do_one_initcall+0x250/0x870 [ 471.966726][T18657] do_initcall_level+0x10a/0x1a0 [ 471.972175][T18657] do_initcalls+0x59/0xa0 [ 471.977018][T18657] kernel_init_freeable+0x29d/0x3e0 [ 471.982729][T18657] kernel_init+0x1d/0x1d0 [ 471.987572][T18657] ret_from_fork+0x514/0xb70 [ 471.992680][T18657] ret_from_fork_asm+0x1a/0x30 [ 471.997952][T18657] [ 471.997952][T18657] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 472.005765][T18657] __mutex_lock+0x19d/0x1550 [ 472.010964][T18657] elevator_change+0x1af/0x480 [ 472.016239][T18657] elevator_set_none+0xb5/0x140 [ 472.021605][T18657] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 472.027925][T18657] nbd_start_device+0x189/0xb30 [ 472.033292][T18657] nbd_genl_connect+0x1597/0x1c10 [ 472.038831][T18657] genl_family_rcv_msg_doit+0x233/0x340 [ 472.044893][T18657] genl_rcv_msg+0x614/0x7a0 [ 472.049905][T18657] netlink_rcv_skb+0x226/0x4a0 [ 472.055184][T18657] genl_rcv+0x28/0x40 [ 472.059676][T18657] netlink_unicast+0x7bb/0x940 [ 472.064961][T18657] netlink_sendmsg+0x813/0xb40 [ 472.070246][T18657] sock_sendmsg_nosec+0x13a/0x180 [ 472.075786][T18657] ____sys_sendmsg+0x54e/0x850 [ 472.081066][T18657] ___sys_sendmsg+0x2a5/0x360 [ 472.086261][T18657] __x64_sys_sendmsg+0x1b1/0x290 [ 472.091709][T18657] do_syscall_64+0x174/0x580 [ 472.096817][T18657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.103228][T18657] [ 472.103228][T18657] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 472.111835][T18657] blk_alloc_queue+0x544/0x690 [ 472.117120][T18657] __blk_mq_alloc_disk+0x194/0x390 [ 472.122749][T18657] nbd_dev_add+0x494/0xb60 [ 472.127681][T18657] nbd_init+0x15f/0x1e0 [ 472.132349][T18657] do_one_initcall+0x250/0x870 [ 472.137634][T18657] do_initcall_level+0x10a/0x1a0 [ 472.143097][T18657] do_initcalls+0x59/0xa0 [ 472.147950][T18657] kernel_init_freeable+0x29d/0x3e0 [ 472.153664][T18657] kernel_init+0x1d/0x1d0 [ 472.158500][T18657] ret_from_fork+0x514/0xb70 [ 472.163602][T18657] ret_from_fork_asm+0x1a/0x30 [ 472.168875][T18657] [ 472.168875][T18657] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 472.176076][T18657] __lock_acquire+0x1520/0x2cf0 [ 472.181439][T18657] lock_acquire+0x106/0x350 [ 472.186454][T18657] fs_reclaim_acquire+0x71/0x100 [ 472.191905][T18657] __kmalloc_cache_noprof+0x61/0x660 [ 472.197700][T18657] __ipv6_dev_mc_inc+0x447/0xa40 [ 472.203160][T18657] pndisc_constructor+0xe0/0x150 [ 472.208616][T18657] pneigh_create+0x237/0x4a0 [ 472.213720][T18657] neigh_add+0x6ea/0xf60 [ 472.218489][T18657] rtnetlink_rcv_msg+0x7b9/0xc00 [ 472.223938][T18657] netlink_rcv_skb+0x226/0x4a0 [ 472.229219][T18657] netlink_unicast+0x7bb/0x940 [ 472.234512][T18657] netlink_sendmsg+0x813/0xb40 [ 472.239806][T18657] sock_sendmsg_nosec+0x13a/0x180 [ 472.245350][T18657] sock_write_iter+0x2de/0x3e0 [ 472.250635][T18657] vfs_write+0x612/0xba0 [ 472.255393][T18657] ksys_write+0x150/0x270 [ 472.260242][T18657] do_syscall_64+0x174/0x580 [ 472.265351][T18657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.271756][T18657] [ 472.271756][T18657] other info that might help us debug this: [ 472.271756][T18657] [ 472.281968][T18657] Chain exists of: [ 472.281968][T18657] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 472.281968][T18657] [ 472.294564][T18657] Possible unsafe locking scenario: [ 472.294564][T18657] [ 472.302006][T18657] CPU0 CPU1 [ 472.307356][T18657] ---- ---- [ 472.312707][T18657] lock(&idev->mc_lock); [ 472.317040][T18657] lock(sk_lock-AF_INET6); [ 472.324052][T18657] lock(&idev->mc_lock); [ 472.330892][T18657] lock(fs_reclaim); [ 472.334870][T18657] [ 472.334870][T18657] *** DEADLOCK *** [ 472.334870][T18657] [ 472.343086][T18657] 3 locks held by syz.4.3370/18657: [ 472.348288][T18657] #0: ffffffff9002bb40 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 472.357775][T18657] #1: ffffffff9015b538 (&tbl->phash_lock){+.+.}-{4:4}, at: pneigh_create+0x4a/0x4a0 [ 472.367259][T18657] #2: ffff888067fdd530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa40 [ 472.376926][T18657] [ 472.376926][T18657] stack backtrace: [ 472.382802][T18657] CPU: 1 UID: 0 PID: 18657 Comm: syz.4.3370 Not tainted syzkaller #0 PREEMPT(full) [ 472.382823][T18657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 472.382832][T18657] Call Trace: [ 472.382837][T18657] [ 472.382845][T18657] dump_stack_lvl+0xe8/0x150 [ 472.382870][T18657] print_circular_bug+0x2e1/0x300 [ 472.382889][T18657] check_noncircular+0x12e/0x150 [ 472.382916][T18657] __lock_acquire+0x1520/0x2cf0 [ 472.382939][T18657] ? rcu_is_watching+0x15/0xb0 [ 472.382963][T18657] ? trace_contention_end+0x3d/0x140 [ 472.382979][T18657] ? __mutex_lock+0x30d/0x1550 [ 472.383000][T18657] ? __kmalloc_cache_noprof+0x61/0x660 [ 472.383020][T18657] lock_acquire+0x106/0x350 [ 472.383038][T18657] ? __kmalloc_cache_noprof+0x61/0x660 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 472.383058][T18657] ? __ipv6_dev_mc_inc+0x4e/0xa40 [ 472.383083][T18657] ? __pfx___mutex_lock+0x10/0x10 [ 472.383120][T18657] fs_reclaim_acquire+0x71/0x100 [ 472.383139][T18657] ? __kmalloc_cache_noprof+0x61/0x660 [ 472.383158][T18657] __kmalloc_cache_noprof+0x61/0x660 [ 472.383178][T18657] ? __ipv6_dev_mc_inc+0x447/0xa40 [ 472.383199][T18657] ? __ipv6_dev_mc_inc+0x447/0xa40 [ 472.383224][T18657] __ipv6_dev_mc_inc+0x447/0xa40 [ 472.383252][T18657] pndisc_constructor+0xe0/0x150 [ 472.383272][T18657] ? __pfx_pndisc_constructor+0x10/0x10 [ 472.383292][T18657] ? __kmalloc_noprof+0x1ad/0x720 [ 472.383311][T18657] ? pneigh_create+0x11c/0x4a0 [ 472.383328][T18657] ? pneigh_create+0x15b/0x4a0 [ 472.383347][T18657] pneigh_create+0x237/0x4a0 [ 472.383365][T18657] neigh_add+0x6ea/0xf60 [ 472.383392][T18657] ? __pfx_neigh_add+0x10/0x10 [ 472.383423][T18657] ? __pfx_neigh_add+0x10/0x10 [ 472.383444][T18657] rtnetlink_rcv_msg+0x7b9/0xc00 [ 472.383465][T18657] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 472.383484][T18657] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 472.383503][T18657] ? ref_tracker_free+0x689/0x830 [ 472.383522][T18657] ? __pfx_ref_tracker_free+0x10/0x10 [ 472.383545][T18657] netlink_rcv_skb+0x226/0x4a0 [ 472.383567][T18657] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 472.383587][T18657] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 472.383614][T18657] ? netlink_deliver_tap+0x2e/0x1b0 [ 472.383636][T18657] ? netlink_deliver_tap+0x2e/0x1b0 [ 472.383658][T18657] netlink_unicast+0x7bb/0x940 [ 472.383683][T18657] netlink_sendmsg+0x813/0xb40 [ 472.383709][T18657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.383740][T18657] ? aa_sock_msg_perm+0xf1/0x1b0 [ 472.383756][T18657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.383778][T18657] sock_sendmsg_nosec+0x13a/0x180 [ 472.383797][T18657] sock_write_iter+0x2de/0x3e0 [ 472.383813][T18657] ? __pfx_sock_write_iter+0x10/0x10 [ 472.383832][T18657] ? bpf_lsm_file_permission+0x9/0x20 [ 472.383848][T18657] ? security_file_permission+0x75/0x260 [ 472.383872][T18657] vfs_write+0x612/0xba0 [ 472.383897][T18657] ? __pfx_vfs_write+0x10/0x10 [ 472.383921][T18657] ? __fget_files+0x2a/0x420 [ 472.383945][T18657] ksys_write+0x150/0x270 [ 472.383969][T18657] ? __pfx_ksys_write+0x10/0x10 [ 472.383993][T18657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.384010][T18657] do_syscall_64+0x174/0x580 [ 472.384030][T18657] ? trace_irq_disable+0x3b/0x140 [ 472.384048][T18657] ? clear_bhb_loop+0x40/0x90 [ 472.384066][T18657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.384081][T18657] RIP: 0033:0x7f649799de59 [ 472.384097][T18657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.384110][T18657] RSP: 002b:00007f649886d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 472.384129][T18657] RAX: ffffffffffffffda RBX: 00007f6497c26090 RCX: 00007f649799de59 [ 472.384140][T18657] RDX: 00000000000000fc RSI: 00002000000007c0 RDI: 0000000000000003 [ 472.384149][T18657] RBP: 00007f6497a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 472.384161][T18657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.384170][T18657] R13: 00007f6497c26128 R14: 00007f6497c26090 R15: 00007ffe4d42d228 [ 472.384196][T18657] [ 472.403745][ T4943] Bluetooth: hci1: command tx timeout [ 472.705195][T18656] netlink: 'syz.4.3370': attribute type 12 has an invalid length. [ 473.701955][ T8171] bridge_slave_1: left allmulticast mode [ 473.707656][ T8171] bridge_slave_1: left promiscuous mode [ 473.715789][ T8171] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.724489][ T8171] bridge_slave_0: left allmulticast mode [ 473.731592][ T8171] bridge_slave_0: left promiscuous mode [ 473.737316][ T8171] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.819357][ T8171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.831547][ T8171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.844251][ T8171] bond0 (unregistering): Released all slaves [ 474.022629][ T8171] hsr_slave_0: left promiscuous mode [ 474.029142][ T8171] hsr_slave_1: left promiscuous mode [ 474.036113][ T8171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.045695][ T8171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.178721][ T8171] team0 (unregistering): Port device team_slave_1 removed [ 474.191688][ T8171] team0 (unregistering): Port device team_slave_0 removed [ 474.256130][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 474.464622][ T8171] IPVS: stop unused estimator thread 0... [ 474.523204][ T8171] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.535605][ T8171] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.570411][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 474.597945][ T8171] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.608562][ T8171] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.655185][ T8171] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.666272][ T8171] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.746925][ T8171] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 474.761821][ T8171] batman_adv: batadv0: Removing interface: netdevsim0 [ 474.826606][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 474.854206][ T8171] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 474.864887][ T8171] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.925387][ T8171] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 474.935780][ T8171] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.965599][ T8171] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 474.976779][ T8171] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.034436][ T8171] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 475.045066][ T8171] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.129222][ T8171] bridge_slave_1: left allmulticast mode [ 475.137756][ T8171] bridge_slave_1: left promiscuous mode [ 475.143584][ T8171] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.151743][ T8171] bridge_slave_0: left allmulticast mode [ 475.157374][ T8171] bridge_slave_0: left promiscuous mode [ 475.164435][ T8171] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.176599][ T8171] bridge_slave_1: left allmulticast mode [ 475.183017][ T8171] bridge_slave_1: left promiscuous mode [ 475.188687][ T8171] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.197233][ T8171] bridge_slave_0: left allmulticast mode [ 475.203135][ T8171] bridge_slave_0: left promiscuous mode [ 475.208816][ T8171] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.219002][ T8171] bridge_slave_1: left allmulticast mode [ 475.225149][ T8171] bridge_slave_1: left promiscuous mode [ 475.231262][ T8171] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.239562][ T8171] bridge_slave_0: left allmulticast mode [ 475.245461][ T8171] bridge_slave_0: left promiscuous mode [ 475.252066][ T8171] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.329560][ T8171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.339600][ T8171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.349134][ T8171] bond0 (unregistering): Released all slaves [ 475.360079][ T8171] bond1 (unregistering): Released all slaves [ 475.369081][ T8171] bond2 (unregistering): Released all slaves [ 475.405079][ T8171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.416669][ T8171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.427090][ T8171] bond0 (unregistering): Released all slaves [ 475.435480][ T8171] bond1 (unregistering): Released all slaves [ 475.444581][ T8171] bond2 (unregistering): Released all slaves [ 475.467655][ T8171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.477663][ T8171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.488522][ T8171] bond0 (unregistering): Released all slaves [ 475.503707][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 475.786057][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5 [ 475.983015][ T8171] hsr_slave_0: left promiscuous mode [ 475.988876][ T8171] hsr_slave_1: left promiscuous mode [ 475.994758][ T8171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.003021][ T8171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.011360][ T8171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.018839][ T8171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.035613][ T8171] hsr_slave_0: left promiscuous mode [ 476.045419][ T8171] hsr_slave_1: left promiscuous mode [ 476.051493][ T8171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.058889][ T8171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.066898][ T8171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.074863][ T8171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.084098][ T8171] hsr_slave_0: left promiscuous mode [ 476.089924][ T8171] hsr_slave_1: left promiscuous mode [ 476.095556][ T8171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.103964][ T8171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.115741][ T8171] veth1_macvtap: left promiscuous mode [ 476.121366][ T8171] veth0_macvtap: left promiscuous mode [ 476.126879][ T8171] veth1_vlan: left promiscuous mode [ 476.132689][ T8171] veth0_vlan: left promiscuous mode [ 476.138472][ T8171] veth0_macvtap: left promiscuous mode [ 476.144132][ T8171] veth1_vlan: left promiscuous mode [ 476.149366][ T8171] veth0_vlan: left promiscuous mode [ 476.269401][ T8171] team0 (unregistering): Port device team_slave_1 removed [ 476.282647][ T8171] team0 (unregistering): Port device team_slave_0 removed [ 476.383742][ T8171] team0 (unregistering): Port device team_slave_1 removed [ 476.406594][ T8171] team0 (unregistering): Port device team_slave_0 removed [ 476.484150][ T8171] team0 (unregistering): Port device team_slave_1 removed [ 476.494583][ T8171] team0 (unregistering): Port device team_slave_0 removed [ 476.543855][ T5288] 8021q: adding VLAN 0 to HW filter on device eth6 [ 476.869122][ T5288] 8021q: adding VLAN 0 to HW filter on device eth7 [ 477.108088][ T5288] 8021q: adding VLAN 0 to HW filter on device eth8 [ 477.318072][ T5288] 8021q: adding VLAN 0 to HW filter on device eth9 [ 477.514350][ T5288] 8021q: adding VLAN 0 to HW filter on device eth10 [ 477.739271][ T5288] 8021q: adding VLAN 0 to HW filter on device eth11 [ 477.937855][ T5288] 8021q: adding VLAN 0 to HW filter on device eth12