last executing test programs: 2.780012587s ago: executing program 3 (id=19620): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000030000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000100), &(0x7f0000000140)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0xfc}}, 0x1c}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x1058, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x1, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xffffff00, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x1, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0xc, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x7fffffff, 0x9, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x13, 0x7ff, 0x1ff, 0xe25e, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe, 0x7, 0x5, 0xfff, 0x8, 0x3, 0x7f, 0xfff, 0x9, 0x894, 0x9, 0x6, 0x4, 0x100, 0x6, 0x8001, 0x5, 0x2, 0x2, 0x7, 0x7ff, 0x2a651f85, 0x8, 0xee, 0x8f6, 0x1, 0x8, 0xd67, 0x6, 0x8, 0x8, 0x80000001, 0x45c, 0x1, 0x3ff, 0xff5f, 0x1, 0x294, 0x4, 0x7, 0x9, 0x200, 0x7, 0x3, 0x0, 0x4, 0x2, 0x2, 0xfffffffe, 0x80000, 0x2, 0x1fd, 0x9, 0x5, 0xea, 0x1, 0x5, 0xf175, 0xc7, 0x1, 0x1000, 0xfffffde2, 0x800, 0xddf, 0x10, 0xdf1d, 0x6, 0x10, 0x3ff, 0x2, 0x0, 0x1, 0x0, 0x10, 0x89, 0x5, 0x3, 0x4dd, 0x200, 0x4, 0x8, 0x4, 0x6, 0x5, 0x2, 0x5, 0xc, 0x81, 0xb41f, 0x9, 0x6, 0x41, 0x2, 0x9, 0x1, 0x6, 0x51e0, 0x103, 0x4, 0x78, 0x1, 0x3ff, 0x8000, 0x2, 0xda, 0x1, 0x6, 0x0, 0x200000, 0x3, 0x9, 0x5, 0x97, 0x800, 0x3, 0x7, 0x0, 0x0, 0x903, 0xf, 0x100, 0x7, 0x100, 0x1, 0x3, 0x2, 0x200, 0x7ff, 0x1, 0xc54, 0x879, 0x73, 0x81, 0x1000, 0x7e5, 0x583, 0x401, 0x0, 0xe0000000, 0x0, 0x4, 0xd, 0x192d, 0x247, 0x0, 0x7, 0x0, 0xf470, 0xfffffffa, 0x2b7, 0x3, 0x3, 0x8, 0x4, 0x1, 0x2, 0x8, 0x1, 0x4, 0x0, 0xff, 0x4, 0x80000000, 0xfffffffc, 0x7, 0x3ff, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, 0x6, 0x4fb, 0x1, 0x8, 0x200, 0x2, 0x252d5040, 0xda, 0x8, 0x5, 0x80000000, 0x0, 0x1, 0x3, 0x3800, 0x3, 0x2, 0x1000, 0x2, 0x0, 0x8, 0x4, 0xfffffff9, 0x100, 0x9, 0x9, 0x8, 0x10, 0x5, 0x9, 0x9, 0x8, 0x6, 0x5, 0x9, 0xa8, 0x5, 0x3, 0x10, 0x3, 0x7, 0x9, 0xf4b6, 0x2, 0x6a, 0x2, 0x3, 0x5, 0x8, 0x40, 0x3b, 0x4800000, 0x800, 0xdae, 0x9, 0x0, 0xfff, 0x9, 0xf, 0x26, 0x1, 0x2, 0x6, 0x6, 0x6, 0x0, 0xffffffff, 0x7, 0xfffffff9, 0xffffffff, 0xfffffff6, 0x10000, 0x3, 0x8000, 0x3231, 0x74e, 0x9, 0x8009, 0x1, 0xe7e1, 0x3db2, 0x375b, 0x9, 0x80]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x5, 0x80, 0x4af8, 0x5, 0x1, 0x1, 0x6, 0x7, 0x5, 0x9, 0x0, 0x9, 0x1, 0x5, 0xe, 0x3, 0xff, 0x8, 0x0, 0xfffffe00, 0x9, 0x3, 0x4, 0x9, 0x4, 0x4, 0xf, 0x6, 0x20002, 0x4, 0x7, 0x4000, 0xfff, 0xf30a, 0x0, 0x4, 0xf, 0x9, 0x4, 0x7, 0x4961, 0xf, 0x1, 0x7, 0x4, 0x4, 0x0, 0x317, 0x2, 0x0, 0x6, 0x5, 0x40, 0x1, 0xffffffff, 0x847, 0x7d, 0x9, 0xffc00000, 0x613b, 0x7, 0xfffffffa, 0x0, 0x4a4, 0x200, 0xb44, 0x3, 0x9, 0x6, 0x3, 0x0, 0x6c5, 0x2, 0x7fffffff, 0x9, 0x8, 0x1, 0x401, 0x5, 0xfffffffa, 0x6, 0x479d, 0x7, 0xffffffff, 0x9b7a, 0x5, 0x800, 0x8, 0x1, 0x7, 0x5e7b, 0x4, 0x10001, 0x6, 0x4, 0x16ab, 0xffff, 0x40, 0x9, 0x3, 0x6, 0x9, 0x3, 0xfffffff8, 0xfffffffe, 0xfffffff7, 0x8, 0x6, 0x5, 0x6, 0xc, 0x0, 0xa, 0x13b, 0x7fff, 0x9, 0x9132, 0x9, 0x1, 0x9, 0x9, 0xfffffffe, 0x0, 0x8, 0x5, 0x5, 0xe2dd, 0x3, 0x80a, 0x1, 0xb, 0xffff0000, 0x80, 0xe, 0x0, 0xa2, 0x400, 0x0, 0x48000000, 0x8, 0x0, 0x4, 0x6, 0x7, 0x80000001, 0x8, 0x97, 0x1, 0xb, 0x3, 0x9, 0x4, 0xb, 0x7fff, 0x100, 0x7ff, 0x100, 0x6, 0x5, 0x1, 0x5, 0x9, 0x400, 0xfd04, 0x3ff, 0xfffffff5, 0x3ff, 0xbfcb, 0x9, 0x1, 0xe329, 0x7, 0xfffffffc, 0x50000000, 0xec, 0x7, 0x1, 0x1000, 0x8000, 0x7, 0x7ffb, 0x3, 0xfffffff9, 0x2, 0x67, 0x1, 0x4, 0xd, 0xff, 0x6, 0x101, 0xcd1a, 0x8, 0x7, 0x5, 0x0, 0x80, 0x1ff, 0x1, 0x1, 0x7, 0xf, 0x1, 0x0, 0xe11, 0x6, 0x3, 0xfffffffc, 0x1ff, 0x1, 0x2, 0x2cae, 0xf3ff, 0x48d, 0x7fff, 0x9, 0x1000, 0xfffffe00, 0x37f4, 0x0, 0x9, 0x2000, 0x5, 0x2, 0xd, 0x6, 0x822, 0x8, 0x0, 0xbec9, 0x9, 0x5, 0x35, 0xc2a, 0x4b, 0xa, 0x80, 0x2000007, 0x1, 0x7, 0x0, 0x12, 0x1c, 0x2, 0x4, 0x8, 0x5704, 0xc975, 0x7, 0x1000, 0x365a8a29, 0x5624, 0x1e9019bc, 0x800, 0xfffffffa]}]}}]}, 0x1058}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001dc0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001e80)={'syztnl2\x00', &(0x7f0000001e00)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x0, 0x80, 0x22, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x20, 0x8001, 0xb71}}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000026c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002680)={&(0x7f0000001ec0)={0x788, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0xd0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xa87}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x214, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xabc, 0x6, 0x7f, 0x4}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1d5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x200, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x16ed}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x7, 0x96, 0x7ff}, {0x1ff, 0xe, 0x4, 0x40}]}}}]}}]}, 0x788}, 0x1, 0x0, 0x0, 0x8080}, 0x220008c4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd61"], 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r10, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) sendmmsg$alg(r4, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000000080)=0x1, 0x4) recvmsg$qrtr(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f00000002c0)=""/238, 0xee}], 0x2, 0x0, 0x0, 0x2}, 0x38, 0x100) 2.155018194s ago: executing program 3 (id=19624): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xeffd) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$packet(0x11, 0x0, 0x300) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet6_int(r2, 0x29, 0x1, &(0x7f0000000440), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fcdbdf250500000014000380040004000400010008000200000000000c00018008000100", @ANYRES32=r8, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4044094) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="f1bf29177000fcdfdf2517"], 0x6b}, 0x1, 0x0, 0x0, 0x44000}, 0x240080a4) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x0) 1.966458194s ago: executing program 2 (id=19626): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x304}, "e3d9162be1b07411", "726c84d47b8e1c777b43316b24f98517", "6284695f", "03000000001200"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "24747942338921a1", "d830ce0a000000000000a7173985202bbfb61b36f3678de8ea2d0d6616076243", "558edb33", "7c5cec21291a43fe"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "24747942338921a1", "d830ce0a000000000000a7173985202bbfb61b36f3678de8ea2d0d6616076243", "558edb33", "7c5cec21291a43fe"}, 0x38) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0) (async) r5 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0) connect$unix(r5, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) connect$unix(r5, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB="080004004440"], 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x48094) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) ioctl$NILFS_IOCTL_GET_SUINFO(r6, 0x80186e84, &(0x7f0000000180)={&(0x7f0000000140)=[{0x0, 0x1, 0x3}], 0x1, 0x10, 0x5ea3, 0x8000000000000000}) close(0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="6001000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000008000000000000000000000000000000000000000000300000000000000000000000000000004000000000000e3ff000000000000000000000000000000040000000000000000000040000000000000000000000000000000ba9b55090000000000fcffffff0000000002000001000000000000000008001f0004000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000008001f0003000000150008"], 0x160}}, 0x4810) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010) 1.60226979s ago: executing program 4 (id=19630): r0 = socket(0x2a, 0x2, 0x0) (async) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000014c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x24, 0x2, 0x1, 0x2, 0x200, 0x7ff}, {0x5, 0x0, 0xf, 0x7ff}, 0x6, 0x1aec, 0xf39}}, @TCA_TBF_RATE64={0xc, 0x4, 0xd71f3c2e6ceb9ec4}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.550628145s ago: executing program 2 (id=19633): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth0_to_batadv\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x2a, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x7, &(0x7f0000000040), 0x4) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000080)=@ethtool_test={0x1a, 0x101, 0x3, 0x1, [0xbfb7]}}) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @broadcast}, {0x0, @random="672e62107895"}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'geneve0\x00'}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000002c0)) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, 0x0) pread64(r7, 0x0, 0x0, 0x100008) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e21, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 1.43727135s ago: executing program 4 (id=19634): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000410000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="240012800b0001006272696467650000140002800500070006"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.262880005s ago: executing program 0 (id=19636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000040)="b4c003990000000008") sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\b\b'}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x84}}, 0x0) 970.492708ms ago: executing program 2 (id=19637): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r0, 0x7) (async, rerun: 64) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) socket$inet_sctp(0x2, 0x5, 0x84) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) (async) listen(r2, 0x2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) (async) listen(r3, 0x2992) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x41, 0x3, 0x3b0, 0x0, 0x0, 0x0, 0x240, 0x0, 0x318, 0x1f0, 0x1f0, 0x318, 0x1f0, 0x3, 0x0, {[{{@ip={@multicast1, @empty, 0x0, 0xff, 'macvlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0x1f8, 0x240, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'tunl0\x00', {0x4, 0x9b8b, 0x10, 0x1, 0xffffffff, 0x10000, 0xf0df, 0x20}, {0xae6b5d1}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x6, 0x3, 0x1, 'pptp\x00', {0x80}}}}, {{@ip={@private=0xa010100, @rand_addr=0x64010101, 0xffffff00, 0x0, 'pim6reg\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x6, 0x2}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x2, 0x9, 0x7, 'pptp\x00', 'syz1\x00', {0xb98}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f0000000000)) (async) socket$netlink(0x10, 0x3, 0x12) 966.694991ms ago: executing program 3 (id=19639): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x10, 0x2, 0x4) close(0x3) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000000040), 0x4) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x4000015) 966.365078ms ago: executing program 0 (id=19640): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7e2438dd}]}}]}, 0x40}}, 0x0) (async, rerun: 64) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async, rerun: 64) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582", 0x56ad) (async, rerun: 64) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x70bd26, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x10) (rerun: 64) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) (async, rerun: 32) close(r1) (rerun: 32) 964.788368ms ago: executing program 4 (id=19641): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="a4000000020601080000000000000000010000000500050007000000050004000000000005000100070000f104000400030000000900020073797a3200000000050005000a0000005c0007801800028014f00140200100000000000000000000000000021800018014000240fe8000000000000000000000000000bb08001240000000020800124000000006080009400000ffff0500140004000000060005404e230000f45db4a76cb69810b576a6db4e80a5e72958880bdec419cc51e88b19e33c4f570ea565afb1dae562a8a4bcf2479400e94b4677d8b0ab64ad2ac2fc17e2992c77762b2cfaae892424a6539fc9f029e30fd8f6f1dad5bf3bd66b2f25351705f6e32275ee4a3eda3c97c590ce9f1f6b7b72d239a12dffa338effdea129eeade25d15d8c79"], 0xa4}, 0x1, 0x0, 0x0, 0x4084}, 0x40000000) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000002c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [{{0x254, 0x1, {{0x28, 0x7}, 0x9, 0x9, 0x1, 0x7f, 0xd, 'syz1\x00', "6ecf9c9aaddd506228feca205ecc962aa12474f0f7b3253fdca1badf82c403c0", "045b8488ce9dca338fe33ae3c4aacdc6472390cd0ef665613adbd250dfbdc17e", [{0x187, 0xffff, {0x3, 0xfffffffe}}, {0x2, 0x3000, {0x2, 0x5}}, {0x81, 0x6, {0x2, 0x10001}}, {0x81, 0x2, {0x3, 0x3}}, {0xb, 0x9, {0x1, 0xcab}}, {0x9, 0x0, {0x2, 0x2}}, {0x5, 0x8, {0x3, 0x9}}, {0xfffe, 0xdff, {0x2, 0x7}}, {0x8, 0x3, {0x3, 0x4a5f76b2}}, {0x5, 0x7, {0x0, 0xfffff001}}, {0x5, 0x1, {0x1, 0x9}}, {0x2, 0xc, {0x2, 0x1}}, {0x8, 0x5, {0x0, 0xffffff0f}}, {0x1, 0x9, {0x1, 0x9}}, {0x401, 0x7, {0x0, 0x2}}, {0x8, 0x7fff, {0x1, 0x7ff}}, {0x0, 0x6, {0x1, 0x20000}}, {0x5c5d, 0x10, {0x0, 0x5}}, {0x6, 0x8, {0x0, 0x80000001}}, {0x5bcf, 0x9, {0x0, 0x1}}, {0x2, 0x101, {0x3, 0x6}}, {0x7, 0x2, {0x1, 0x7}}, {0x2, 0x58ad, {0x2, 0x4}}, {0x3ba, 0x4, {0x2, 0x4000000}}, {0x800, 0x5, {0x0, 0x6}}, {0x5, 0x1, {0x0, 0x6}}, {0x8, 0xb, {0x3, 0x3}}, {0x211, 0x2, {0x3, 0x73b0000}}, {0x4, 0x0, {0x2, 0x1}}, {0xb, 0x5, {0x3, 0x7}}, {0x8, 0x4, {0x3, 0x4}}, {0x400, 0x80, {0x1, 0x8}}, {0x6, 0xb, {0x2, 0x40}}, {0x66, 0x0, {0x2}}, {0x5, 0x5, {0x1, 0xffffffff}}, {0x8, 0x3, {0x2, 0x2}}, {0xfc0b, 0xe, {0x1, 0x1f}}, {0x79eb, 0x671b, {0x1, 0x100}}, {0x7f42, 0x2, {0x0, 0x3}}, {0x0, 0x17, {0x2, 0x401}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) 960.311302ms ago: executing program 1 (id=19642): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0xffffffffffffffc2, 0x10, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x1194, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6vti}]}, 0xfffffd44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r5, 0x80705864, &(0x7f0000000280)) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0x200, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000440)={'syztnl2\x00', r4, 0x10, 0x10, 0xf, 0xe, {{0x1c, 0x4, 0x3, 0x4, 0x70, 0x68, 0x0, 0x8, 0x29, 0x0, @local, @private=0xa010100, {[@cipso={0x86, 0x27, 0x0, [{0x2, 0x5, "c570f9"}, {0x1101c4cb9fc644b4, 0x10, "fd706c382657bc1feb66f2aba027"}, {0x6, 0xc, "97b1d42543895dd00503"}]}, @timestamp_addr={0x44, 0x34, 0xd9, 0x1, 0x8, [{@broadcast, 0x1}, {@multicast2, 0xfffffffa}, {@remote, 0xf2}, {@private=0xa010102, 0xb06}, {@broadcast, 0x6}, {@multicast1, 0x5}]}]}}}}}) recvmmsg(r5, &(0x7f00000083c0)=[{{&(0x7f0000000740)=@rc, 0x80, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/180, 0xb4}, {&(0x7f0000000880)=""/120, 0x78}], 0x2, &(0x7f0000001300)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000002300)=@sco={0x1f, @none}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/39, 0x27}, {&(0x7f00000023c0)=""/148, 0x94}, {&(0x7f0000002480)=""/115, 0x73}, {&(0x7f0000002500)=""/152, 0x98}, {&(0x7f00000025c0)=""/26, 0x1a}, {&(0x7f0000002600)=""/194, 0xc2}], 0x6}, 0xffffffff}, {{&(0x7f0000002780)=@ax25={{}, [@netrom, @netrom, @bcast, @remote, @remote, @bcast, @bcast, @netrom]}, 0x80, &(0x7f0000009680)=[{&(0x7f0000000540)=""/57, 0x39}, {&(0x7f0000000a40)=""/189, 0xfffffffffffffe59}, {&(0x7f0000000b00)=""/203, 0xcb}, {&(0x7f0000000c00)=""/2, 0x2}, {&(0x7f0000000c40)=""/197, 0xc5}, {&(0x7f0000000d40)=""/197, 0xc5}, {&(0x7f0000008680)=""/4096, 0x1000}], 0x7, &(0x7f0000002840)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000003840)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000000e40)=""/146, 0x92}, {&(0x7f0000003980)=""/212, 0xd4}, {&(0x7f0000003a80)=""/57, 0x39}], 0x3}, 0x6}, {{&(0x7f0000003b00)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000005f40)=[{&(0x7f0000003b80)=""/234, 0xea}, {&(0x7f0000003c80)=""/57, 0x39}, {&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000000f00)=""/147, 0x93}, {&(0x7f0000004d80)=""/4096, 0x1000}, {&(0x7f0000005d80)=""/135, 0x87}, {&(0x7f0000005e40)=""/166, 0xa6}, {&(0x7f0000005f00)=""/18, 0x12}], 0x8, &(0x7f0000005fc0)=""/189, 0xbd}, 0xfc5}, {{&(0x7f0000006080)=@rc={0x1f, @none}, 0x80, &(0x7f0000006240)=[{&(0x7f0000006100)=""/172, 0xac}, {&(0x7f00000061c0)=""/115, 0x73}], 0x2, &(0x7f0000006280)=""/248, 0xf8}, 0x81}, {{&(0x7f0000006380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000006440)=[{&(0x7f00000001c0)=""/8, 0x8}], 0x1, &(0x7f0000006480)=""/135, 0x87}, 0x4}, {{&(0x7f0000006540)=@hci, 0x80, &(0x7f0000007b40)=[{&(0x7f00000065c0)=""/252, 0xfc}, {&(0x7f00000066c0)=""/212, 0xd4}, {&(0x7f00000067c0)=""/4096, 0x1000}, {&(0x7f00000077c0)=""/40, 0x28}, {&(0x7f0000007800)=""/210, 0xd2}, {&(0x7f0000007900)=""/246, 0xf6}, {&(0x7f0000007a00)=""/60, 0x40}, {&(0x7f0000007a40)=""/215, 0xd7}], 0x8, &(0x7f0000007bc0)=""/104, 0x68}, 0x3}, {{&(0x7f0000007c40)=@nfc_llcp, 0x80, &(0x7f0000008180)=[{&(0x7f0000007cc0)=""/112, 0x7f}, {&(0x7f0000007d40)=""/136, 0x88}, {&(0x7f0000007e00)=""/106, 0x6a}, {&(0x7f0000000fc0)=""/224, 0xe0}, {&(0x7f0000007f80)=""/219, 0xdb}, {&(0x7f0000000940)=""/214, 0xd6}], 0x6, &(0x7f0000008200)=""/187, 0xbb}, 0xf}, {{&(0x7f00000082c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000008340), 0x0, &(0x7f0000008380)=""/57, 0x39}, 0x7}], 0xa, 0x101, &(0x7f0000008640)={0x77359400}) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x808a4200}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0800030002000000"], 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x8014) r9 = socket$key(0xf, 0x3, 0x2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000070a0102000000ffefffffff000000020900010073797a30ddffffff"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$key(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="020600000200"], 0x10}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 904.775251ms ago: executing program 4 (id=19643): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000640)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r2, 0x0, 0x0) (async) sendfile(r0, r2, 0x0, 0xc1) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x20048000}, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040)={0x3, 0x4, 0x7fff, 0xda, 0x6}, 0x14) 904.595921ms ago: executing program 3 (id=19644): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d800000019000100000212ba0d8105040a600000ff0f040b067c55a1bc0009007d0006000000000015000500fe808178a80035fd00e4ff3f0200000901ac040000d67f6f94007100a007a290457f0189b316277ce06b9e9dfc487d5d32bace8017cbec4c2ee5a71602b2a10c11ce1b14d600741f795025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fec114c5d46a769b4d4ccd40dd6e4ed01ddceb5a2b5ac3290f9eaef6288b97192309a00000e000000000000000000000000000000000000000000000000000ab628", 0xd8}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req={0xc, 0x80, 0xd9, 0x8000}, 0x10) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 873.816676ms ago: executing program 0 (id=19645): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="010000000000fdffffff0800000008000300", @ANYRES32=r2, @ANYBLOB="0c00990008000000170000000400ff00"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 873.429175ms ago: executing program 2 (id=19646): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@ra={0x94, 0x4, 0x1}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x9, 0x9}]}}}}}}}, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"b50091b3b1173459f317528c25bae5ca", 0x0, 0x0, {0x7047, 0x9}, {0x8, 0x61a}, 0x1, [0x1, 0x6, 0x2, 0x9, 0x1, 0x400, 0x200, 0x8000, 0x6, 0x3012, 0x0, 0x8, 0x3, 0xffffffffed333414, 0x2, 0x2]}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000200)=r1) (async) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x20}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c084}, 0xd0) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000240)=0xd, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3e, &(0x7f00000000c0)=0x4000007, 0x4) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x1c}}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d2, &(0x7f0000000100)) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r8, 0x0, 0x0}, 0x20) (async) connect$llc(r6, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0xfd, 0x0, @remote}, 0x10) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x74, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) 824.724252ms ago: executing program 1 (id=19647): r0 = socket(0x10, 0x3, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000000000003e061000000000a16138322efc284200009500059fd8223c2231d5fed91fa8e00000000000024c3878a0cc6973531b8c55c679563c943fe2302714976fb7ac9b2904b54051278e2092016604e8cfec49f4922b467e48ec3593f0cf18ac55894cdc09d93725c0337a880ff48b2cb2a59b3e66de736440c6fd532d28470747e911e2e03480c2291876e0dfa23f0009"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) (async, rerun: 32) r1 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x102, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x5, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}, {0x7, 0xe22, 0x9, 0x5cf4}, {0x3ff, 0xb, 0x3, 0xa6d}]}}]}}]}, 0xa4}}, 0x24040084) (async) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x22, 0x0) (async) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) (async, rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000000)={0xa0000001}) (async, rerun: 64) epoll_pwait(r5, &(0x7f0000000400)=[{}], 0x1, 0x80, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES16=r4], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 32) r7 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r8, 0x11, 0xa, &(0x7f0000000240)=0x5, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newchain={0x2c, 0x64, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0x5, 0x10}, {0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x3}}]}, 0x2c}}, 0x20040054) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x0, 0x0) preadv(r11, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/144, 0x90}], 0x1, 0x5, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000004c0)={{0xffffffffffffffff, &(0x7f0000000200)='\x00', 0x10000, &(0x7f0000000280)={@align=0x6, {0xfff7, 0x8, 0x9, 0x7}}, 0x4, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000380)=0x7}, {[0x80000001, 0x0, 0x4, 0x6]}, 0x10, 0xe8, &(0x7f00000003c0)=""/232}) 737.970675ms ago: executing program 4 (id=19648): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 32) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0xffffffc0, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000600012800b0001006772657461700000500002800800140006000000050016000200000006000e0000000000060018000400000004001200050013"], 0x90}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70f926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x3}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xfffffff9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async, rerun: 32) r4 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES64=0x0, @ANYRES8=r4], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r5, &(0x7f0000000240)=[{&(0x7f00000018c0)="1323c456e2a659885728853f28e4f9565dfb3099f80cf478217c38a38bad0cc70aeca83401372fa5f6a6e4cc74a4bdbaf6c373a73b429b6c7fdf67e214c89a2204c7a69fdbfd1811b97113e114be835c2408d2af71931d7a9ca3ffa28a9767402d4fd3a1f042eb280aa4292d2710b7d56cd6dedc77384cfa5e84211846ee93e3a1973c73e348e8b211de2fdaeec56a82d273b09f276c43ea7ff1a3cf7dae8608474f1766d3b81713423014613a616f8b199cfe53abea04fc8bd68114cc0c3ede6fd7d6e8add1a61ce4db83bdca97ebc1ac9820dd5d79a1e74f2c41d9e5d5bee79797b4ce6fdb6aa611d0b335285d3db5613b13ca32019604d42912bb9592c5661242279648b7f868fc9862ad4fa71094e0189b258a1d6369c6b7c4c206eb5b0fa793d7d0b645e1e9731b5d64acb38118eb20f18c0ac2c1bb4e59476df1d8876cfa330ec6698685a657a40fd52c999c6061feb620bef44380aee58157199be51eb88d5231b78f2ed8a5515d395b783977bd6316934838ed3e25d5f3065b0358490523a749450ffdaf57dc93d706f6b1ebf03bb6ff36765bb61d8fb75af0ac62c26267fb25ff77c38978a5e735421db136eca51eff7a1380a6766f1d150ad90309a830c0c454d0da0e15b9a78192d37b907f5576e26055cb71faa59db337a45d3b0717fdf11afb35e4fa572eb55effb4a25263c0bd9a6f150ad92eea4c43a333eb78e625603bdad3274e85b3c2594a338e3f31637489bdc0317902ec4c985322b620104abac79e9a087ed54ead307e18e57ed8b9771515193253839081aae7d33f36ec36aaef827a64a446e4b8caac73650526c378214637fd0d4d4af748889eaf84265499c6187c9ba93324a93c12f14319e8264b3eac075054def4e9e667404464659718cb78dde4e50aa167aa19be4e0c78cae38ce07b7d8fbebfa7a0a119b6b397db91fd4f8715273171cc18740887ca35176cb91cf25f2d774872cda95edf86c0470f42653c8a4a9f9d4526c1ae6fdf870d38fda1ca389237d2ed6f25b71c28bbc85a2b4907dc502a7f8c79a12730aeb7b6245e5de6b4d59e27ab63e408fbf16aca9375b183573aee8f25aeb22e4d88773ad14b3fd65ffdd0997fce9729a266161910462fd9a50cfcbfb6e38314ce4f41eda8336886ea35c0ae3483ee65af7d32a728527fbb2b0207b9b8dfe89d357b49b669ac86864e8db6027a4a901286a72cbd0c2f1aaf339670fa999f581d7ec8204bdeb72a8242526df62b94982198d7f1b9dd901f957a6bb242a09d67802c6555f2a2da8d342c3d2c78923f3185b8821b3e33691287d2229e94eb413c027ab46ab8998540d035faa8888a67fe92c1141d66cefbe8f497b08bb1a3ea07211b439d5490472fa3625f3da6f9497e0ab49287d05247fa502215260fd8e42110a858debbffd086ff256c07856f38db648a97a9dcb59c21e75e5abdd469c9151bf4a10f6a44a6f658fac6580399feb1bbd67d483b8fa1254eec19a4522b524928a8f8ddf97a6612a1d44aa9aff65b41bf1be54c3208a4694c814263750c333790b8133df04298688a9559ed53fd5c13d3161ba0aaf2437fadd5d440795cc57d1f51b70ba146c9ef4b283583bc93edc10f3e8e13da137d51320018a11b26a9ad7ea0719068cff2aa51e9fefc33ec8871a7b6199b00e22555f1d97322e4433fb3978bdf4593607aa010941f6d96dc74dfec87a108047fb202dc79681f52c59d5841aca93b69a57a02384976a574970b2b4b8580dbb51f082514896c00a5501207cd172d5c6a5c33c278dfe1d5ceaf7afed7c4403370b84e579c2756ddd39de340622fbfae1696d28e8014d6a32fa11327f5a1b4e81faca9e380a29a649e2a5bac219b5d8a8138306c5ee124eb92c2510a665164c03724c46deef1fec935299883716dd39c7190668a1e211f690fd9f13c338223ddd166f41cbfc583e91201af8a605b8d5672f5311adeaaa66ebf48f4ee1f8568d11be876a2955725f539a01701905e7f7cbb0d7b043c67c1c6d59e150f5dfbd319b9bb4eadd554f1b8b512d425a62200d005ac68aba47e8f759c2ed351393eb89c51c37a29d4a7051a063535915db5a7ece6bba934452ee65f4ae75ebff1199d6319fac5107da4fbb84612ff8b57b0db737d90ad3c5151b5e593e58198c04f336c90d36eba959a7e75c10fec7c788c2ef8cdf6f91f8c96d0df683b9b7602774d267d117ec726319f874719a83543383e097966dc4d45e0e0405de7a86560b3222ddcc933818e730733c476e362b2bf301fbf08abc3925bf883396e04fc0d0917b0510db14de878dff3d3d8ef0c31d4918d21775c4c16861e878211b36b61dda4c9e5131b8007f74ff89a12911d971763614b82fa1776df01d5ec95e1d61d76aab2845f76c8857ecb36d309d6a6c77039c35b5223d9432f4244b51125a83cc2c3aac2492c168179bf09d161acf3a3f04a59e31bb3c552092ac2aef4f745cfecc881ff630ddb355dd00285f394dc5f63a906320ba417fa7ca02ea5ce83a642704cdc55a2e59e15c4739a28d29818239f95c6cc0b747e4fb507145236eed804199432777ff8d598f5b622a40594dd22abb3b6cbf814b6109cd6141f5245f3bbc414f329818bf0d6b2e0859070ef757c8d108c8a0f8cab616e49d6e33e74bb26f2f2a0d80e6047ebe839cc211daf852cccb82d46239c3261be1c0e95e700e4ade6bdb039cb5adcefb0eabcb1ddbdd406be672502158079612be3e1baeb1cf86efbd89b8510efe80875a837fe84185343f1121b43eaea94eaa4e8da10c4460928eb4e0a29506ee29ec6185546659b8503c91835a0f4630bc127e77e51c650cc790bc266425abe481c77ff6462c5f587a34f68848f7b674943f624a6a09b02f2d8327d63c281b97a6ceb3455417af42ac942405189be4e8a1da53a10c8fc24d157db3ce78a4634482654d00e4a87c74c8dab067bee20b33e047f55000a03c585f6c00fccb09008925a0b551c261ede9ca496379183d6bedd418c97746a1208afc5affaa160f9c92146dfe50ae5cfbbed4754eac096d12eeddebbc7a107bd93b1df79f3353fc4eac263014663273d1c431decef36171619a0bcd0f148a459431e8728ec44ee35970eed685fa7589d4dcfb79e1b98a330d3814401f9e2a50281265c5ba16429f538d30dc998bbb3ffd177deb9787082859d8569bc4d9b66f9d0fd63a892fe49bc746b03101f8191e3e3e8e4dc6c0ee83c7134271e4cebf9449b13fe4e01ede40544edc80f2df8af7741ca6311f5d9b5e55afcaaae30ea67662230ed8ced039ab5d4d003dcaf0c7174efc8c2a13520023d0b865250177e0241cd9738562d06dffbfce99bd482daf49fe024e9a0c741d854a8030efb3afaebaac4210df0738c346974d4a2b526bf47032b2c4f5a76c6acd47819d64df43740d4a7bf07db87613f8fa7c7e394de6ca79b9bb65d922fbf2d547afb5f3a1565b66d31d70732df18b8a306ef529d5682b893cfc0ac98b576537be1f87e373f42e6cc5973c13b3890f5d2093d7d7dcd1aff546aadf31489e788c527999229d72da3b3e47e5d9b6ab23cdd628d355379fe7924cdd6bbcbce9414c935d697e6f2da6daedc51e4bc77f21ed7257aaad0554a6f1198de04116a44d7ce9a2f92b0e93dbcf58069b6b11c1f2923c8f9c2c204774f03ec26fa06c28ef7fec095f7eb5b00d2c24068d38407787ac08628fe51b47a43f8c970e7a0dabc81474540dfc07a2376f791b957660389c291cf14ef43507b75dfd58d644e42fc4b83f4917adcc5eebb6bd582088b41010ce11d9e6ea65c3ebf0820356b0d567582f3cdac473894e8706c2191776c5edf5036e6d507b4563c839509d56e3ec463ee7681487be911c194c043956fa63a15701d9c28d863412411a1baa0c8ac6ad6c5d5f1567a311ed4d793064926e64ac8ab73888b9ad88dff6bc0f7026a4cd282c9557d1e5d279b1d58bc4355ffa70fbdcaabd8233ef68d4a78bb7d93f0ff541b22f258697ca3b2fb4df138f53aa575933a0fa1a8f92a6c9d3d8e6d5e232f219ea4c6a831b6105d6b7020004fcf8c040b4a6c69c4a6176dece4b5aa24444092efb4ecf5ad464a3dadbfde0bc7bfe88ebec2c6340d4f0cb82a9ab7c2f4ca4d3fb86f1d8d79c21f2eb8e29810c21a5151dcb11f53f86d29e83763aa3497243eab443e17686fee85245e808ca0598b981436707edd6880c912898850900a323ead3634f839f4d041af41e648b617c6e1cbf9cd624b23fda2a859c4bfed92efe66de6e9e8367375cc9b82f9b961c17b4f0daa656c9cd4ea599ec670724963db56a5781c266ee7c6b03d436c9c97fe354a658a26cf44cfbcb3a953b0287cf0eeb41e6338aca4575a7e397417d12f3f3e30f3fc1f9ab1c3e649bdb24fb79f2b0ac38cfd5961a933d1d1580f51220ccafa8ee25d7b0653de852f0fd78f3ef7bb1a9d2118d4804200aa98f1da9bc0078fe1bc32b1c7d9679f7e9b95acbf57bc10d8292d658d5cf5c6bd384a75201a2178a5e76c69dc3816503cc7977dbbcebe0ac8dce049da72b54be3c92abaf9a413071c2cb62504c53f66c1a3ff675649fd87fa6654957db5bebc29fbec88801909e87136c86fc8030c293821bd2521bbd61a6508dd167cc2f4c5ffc29164c59942f51e31e779c70786a419d20b5a8b1aeecdcfd2c48f9e3218e30c7f420e329104c1cf3a35f5ae02fc759c1cecc1d97672063df9ae5301a717c0b9ce743d14f4bdec9728c98f80d4d47cbb9ca24b15d171f7eba806b8d210f02cf4051e95465501c611548c3870e1ed440c5fd0c4cf48257717cc11abb3f925b105214c6893d394f663295aecc4ada381f738e26a951854f78f36d755a31f43e3423196e29ef74cf7b54ebd67752e04eef129d688038e7944a7c7851030846acc619932079dbb1e8d97cce72ab543375b6350b60e70a4c95848af1c6a12fa7286b1fe50be456211bc708824165bb1c30dc9e1268640420dd435b1ef378c567ccf4866da9fbd317ef06cb6e48f36d0ba62efe8f9f40ff9316733c97526912f76752a3e308be72b737a65e308350e7b9b99ad1f08ca5ec39c37ff7c716aeee8f7ccb74c5ed30a8f8d39e809f27bb64cca1563622739fd0186add2040fb377b7474a49561e9b047793ed47f9536b256ee5db8593cb8f0890b9dc6067475ac27d56377af7c9e164af75fd910fc383ab828d93986804feff30acfa3bc55792278232f6f054e3292d00e4e69a3d2256ba424b16c91f62d6bf4a3927ab105973d3892501178363effb7171c1469577382bb9e5bcaaf844e1f3552b51ce7733aa147a60e3447999f12146ab10160272eae69eeeb17351788146135647a161bab3bba11acb70a3a7b896dfe3956e7c3b46cd4cffbf02eb1b9d2b19a3f39922004d93e9ef7aebd19637182aa687d5e4b26de0ba7985ebcc37c49599a888e368ab0d6dc7ec396dfa112fee74717f8ee0aaf241c6206f3eab12cad8f4c6ecd240f7a4deba7dd6bafe5c611c55b1a9b6f34463c00b89f19e3e52f25ac7a1fd200d51881752ac7bab5b5466d0e10b7cb4d36d855470d157df92b882afd9ec89f14efb5aab75110d686ce5bf9aa27cc2cbadbc423b2e3b0407e180d72f4c962a3c9b0334ab467bbcf8b7646e35900e0970d0887040e434d8fb3d35691147d90494db8bdb6286a5a96a4e7a3b1ad6bfc169226fc3e0ebd00302875cdc22b829490863f92838a30664e0783f69ab1c9c5ad51aa6617b41b24a50da6f0852c8e781518c09d313b5", 0x1000}, {&(0x7f0000001380)="625acd8f38fb2d83d2e0aa839a894c77c03015b83731793e2a2fa534307fbbf2c990592cb642f557ecb70bbe625ae3248727161901baaa286f0cd36aafeb5c1d487e8506490fe0616a2af6"}], 0x4b) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) (rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async, rerun: 64) write$bt_hci(r7, &(0x7f00000000c0)=ANY=[], 0x138) (async, rerun: 64) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000400)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[], 0x27) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 736.874388ms ago: executing program 3 (id=19649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5f, 0x1, '\x00'}}]}, 0x44}}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa100000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40) 721.8065ms ago: executing program 0 (id=19650): ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@private0, 0x6d}) read(0xffffffffffffffff, &(0x7f0000000040)=""/4096, 0x1000) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000001040)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000001100)={&(0x7f0000001080)=""/123, 0x7b}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r1, &(0x7f0000001200)={&(0x7f0000001140), 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x40) (async) ioctl$int_in(r0, 0x5421, &(0x7f0000001240)=0x8000000000000001) write(r1, &(0x7f0000001280)="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", 0x1000) syz_genetlink_get_family_id$ethtool(&(0x7f0000002280), r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000022c0)={0x0, 0x7, 0x10, 0x49, 0x1}, &(0x7f0000002300)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000002400)={r3, 0xa4, &(0x7f0000002340)=[@in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e20, 0x3, @loopback, 0x6}, @in={0x2, 0x4e22, @private=0xa010100}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @private=0xa010100}, @in6={0xa, 0x4e24, 0x7fff, @remote, 0x871}, @in6={0xa, 0x4e24, 0x9, @mcast2, 0x1}]}, &(0x7f0000002440)=0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000002480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f00000024c0), 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x4b6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xea5}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x11fd}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x88a}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010090}, 0x44000) ioctl$NILFS_IOCTL_GET_VINFO(r1, 0xc0186e86, &(0x7f0000002780)={&(0x7f0000002640)=[{0x0, 0x0, 0x6, 0xfffffffffffffffb}, {0x80000001, 0x80000000, 0x200, 0x1}, {0x1, 0x1ff, 0x6, 0x9}, {0x8, 0xb9, 0x27f, 0x6}, {0x0, 0x2, 0x5c6f}, {0x3, 0xba55, 0x1}, {0x7fffffffffffffff, 0xbe, 0x8, 0x1}, {0x6, 0xbaa6, 0x4, 0xe87}, {0x2, 0x8, 0xfff, 0x6}, {0x8, 0x9, 0xb, 0x6c377537}], 0xa, 0x20, 0x5}) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002800), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(r6, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x14, r7, 0x300, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x10) r8 = socket$inet(0x2, 0x6, 0x1) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002940), r1) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000002a80)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002980)={0xbc, r9, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffff1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) (async) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000002bc0)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b00)={0x44, 0x0, 0x70aca38887e86c23, 0x71eb, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x47d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1cc}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x800) (async) socket$kcm(0x29, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000002cc0)={'ip_vti0\x00', &(0x7f0000002c00)={'erspan0\x00', 0x0, 0x7800, 0x80, 0xfff, 0x4, {{0x26, 0x4, 0x2, 0x39, 0x98, 0x67, 0x0, 0x8, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x1c}, {[@timestamp_prespec={0x44, 0x2c, 0x79, 0x3, 0x6, [{@remote, 0xf8c6}, {@loopback}, {@local, 0xe4a}, {@broadcast, 0x5}, {@loopback, 0x6}]}, @timestamp={0x44, 0xc, 0xa8, 0x0, 0x0, [0x634, 0x8001]}, @cipso={0x86, 0x28, 0xffffffffffffffff, [{0x2, 0x2}, {0x7, 0xb, "1a331bb414791ea468"}, {0x5, 0x6, '?\':H'}, {0x1, 0xf, "e937614aab7b85e25997d993ca"}]}, @timestamp={0x44, 0x24, 0x31, 0x0, 0x2, [0x6, 0x4, 0x0, 0x404, 0x80, 0x80000001, 0xd558, 0x5]}]}}}}}) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r10, &(0x7f0000002dc0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x28, 0x1411, 0x400, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x44805) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000002e00)={0x1e63, 0x8, 0x200, 0x95b, 0xdef, 0x1ff, 0x9, 0x1, r4}, &(0x7f0000002e40)=0x20) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000002e80)={0x84, 0x4, 0x8, 0x7, r11}, &(0x7f0000002ec0)=0x10) 659.186973ms ago: executing program 1 (id=19651): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)={0x5c, 0x47, 0x107, 0xfffffffe, 0xffffffff, {0x1, 0x7c}, [@nested={0x48, 0x4, 0x0, 0x1, [@nested={0x41, 0x68, 0x0, 0x1, [@generic="55ed2c84fe33af6a667218e36e9cfb765f085c523587bd905079af759fa9f0859cb8fad5ac1771c3b2883b24c0e05959f7494d38d5ec48a6e03e446eac"]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r2, 0x1, 0x0, 0xfffffffd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x7}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r2, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xffffffff}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x9}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xc23}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x62}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008008}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r5, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x1000) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000540)) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x4, 0x1, 0x80, r5, 0x0, '\x00', r4, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYRESHEX=r6], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x9}, 0x94) r7 = socket(0x2b, 0x1, 0x0) listen(r7, 0x9) setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$nfc_llcp(r7, 0x0, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc) 579.10665ms ago: executing program 2 (id=19652): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000420000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="240012800b0001006272696467650000140002800500070006"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 465.776524ms ago: executing program 3 (id=19653): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x9b72) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000031401000000000000000000280002"], 0x38}}, 0x0) 464.817898ms ago: executing program 0 (id=19654): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, &(0x7f0000000100)) 313.264073ms ago: executing program 1 (id=19655): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000400)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="017917000000000020020c00000008000400000000bb"], 0x1c}}, 0x0) (async) read(r1, &(0x7f0000000100)=""/19, 0x13) 266.546152ms ago: executing program 2 (id=19656): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x840) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080), 0x0, 0x0, 0x0, 0x5, r3}, 0x38) (async) accept4(r2, 0x0, 0x0, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020642500000000002020207b1ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1}, 0x94) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r4) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c23003f) (async) write$cgroup_devices(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r4], 0xa) (async) unshare(0x10080) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) (async) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) (async) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=',', 0x1}, {&(0x7f00000002c0)="f7925e", 0x3}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011809ed61b77d9f16a96c594a1961ed189d63c3391c4854d66a1452ed6b21920c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d079f0b7120f9b5cb852eaa3c6ad1b9be"], 0xb4}}, 0x0) (async) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmsg(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2041) 177.770026ms ago: executing program 1 (id=19657): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400"], 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) clock_gettime(0x4c25726cb16dd79b, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaa1b08006d963adf952e2f1d3220654524002802650078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5404000090780000"], 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x7, &(0x7f00000000c0)={@remote, 0x0}, &(0x7f0000000140)=0x14) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000390400000000fbdbdf2500000000", @ANYRES32=r6, @ANYBLOB="010f0000419a04002000128008000100736974001400028008000300ac1414bb050004"], 0x40}}, 0x0) sendto$packet(r4, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r6, 0x1, 0x4, 0x6, @local}, 0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x40}, 0x4d, r3}) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r7, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x1}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x64, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r8, 0x402) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup, 0x16, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x200, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x10}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xe4, 0x2, {{}, [@TCA_NETEM_RATE64={0xc}, @TCA_NETEM_DELAY_DIST={0xa, 0x2, "58d5c080bbdd"}, @TCA_NETEM_LOSS={0x44, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x8}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0xe}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x10001, 0x2, 0x80000000}}]}, @TCA_NETEM_LOSS={0x60, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x0, 0xfffffffc}}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x0, 0xffffffec}}]}}}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x2, 0x7fffffff, 0x4, 0x2, 0x4, 0x3, 0x6, 0x5}}}}, @qdisc_kind_options=@q_hhf={{0x8}, {0x54, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x6}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x6}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x7}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xe762}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x4}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x1}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x7fff}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x80000000}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x80000001, 0x7, 0x3, 0x5}, 0x4, 0x0, 0x8, 0xd47, 0x732, 0x5, 0x1b, 0x1f, 0x2, 0x2, {0x2, 0xd, 0x2, 0x6, 0x5, 0x100}}}}]}, 0x200}}, 0x0) 138.539958ms ago: executing program 0 (id=19658): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'virt_wifi0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000ae84a9407d6e2903941a6480fffde3600e1f9a0d99c613dd0f446f5a08312f2ae25c260175814deeb84b53a8bd2859115b7925fc95a3753448a41e99ef699bd3c1ed505e4dbf24ac9b24eec08b645fd46c0460db3c5a72e2d41fccc7b3a5f490b7d052bdce6b61afe3c5d57c0f00bcda33e53252a61e706456ca617f2e76f1a285b2d228251f1604d56fc7177fd17f5ebfb179390ab445d47a56677f0e9b75dd6af39f684fdd1e85127be5658cd47dafcbd41556af", @ANYRES32=r0, @ANYRES8=r0, @ANYRES32=r3, @ANYRES16=r4], 0x1c}}, 0x4810) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c8000000c0601030000000000000000030000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4048030) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) sendmsg$DEVLINK_CMD_PORT_GET(r5, 0x0, 0x4000000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 66.145593ms ago: executing program 4 (id=19659): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000700)={{r0, &(0x7f0000000040)='/dev/virtual_nci\x00', 0x400, &(0x7f0000000080)={@_ha_fsid={[0x2, 0xae]}, {0x5, 0x5, 0x7, 0x7}}, 0x4, &(0x7f00000000c0), &(0x7f0000000200)=0x4}, 0x1, &(0x7f00000006c0)=[{0x1, 0x114, &(0x7f0000000240)=' \x01\x00', &(0x7f00000005c0)="5b09de25f7c2aafbbadde0e5d7582843e5dda4cf25c4b23c5865b44dce71b90d5957efab673f456653a168ccb29b67460019bbfc298df1a484cf865a9c022d5bf70126fe38899d9789442171db4ff8208a3784acd9cc1e7272d4fdb241b87189048de5b400fc24f4dbd5234b3e796d3dea7937cd82c7d52b3c0a15ad8a5b1801f823ec981f3331c408c0c1d4106d2e32c7619b9c9890915c8c13072c0a1106cce032492171a8d11c27235d948b2bfc9ce0f946a52273af715d7e7f03ab4f3ff933ab70ddcd4e64bb96730935af3bef5ed04a969097f519ce5bba5c43a234078af43198a4d15d5c736f1bbdac4e", 0xed, 0xa}]}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000700)={{r0, &(0x7f0000000040)='/dev/virtual_nci\x00', 0x400, &(0x7f0000000080)={@_ha_fsid={[0x2, 0xae]}, {0x5, 0x5, 0x7, 0x7}}, 0x4, &(0x7f00000000c0), &(0x7f0000000200)=0x4}, 0x1, &(0x7f00000006c0)=[{0x1, 0x114, &(0x7f0000000240)=' \x01\x00', &(0x7f00000005c0)="5b09de25f7c2aafbbadde0e5d7582843e5dda4cf25c4b23c5865b44dce71b90d5957efab673f456653a168ccb29b67460019bbfc298df1a484cf865a9c022d5bf70126fe38899d9789442171db4ff8208a3784acd9cc1e7272d4fdb241b87189048de5b400fc24f4dbd5234b3e796d3dea7937cd82c7d52b3c0a15ad8a5b1801f823ec981f3331c408c0c1d4106d2e32c7619b9c9890915c8c13072c0a1106cce032492171a8d11c27235d948b2bfc9ce0f946a52273af715d7e7f03ab4f3ff933ab70ddcd4e64bb96730935af3bef5ed04a969097f519ce5bba5c43a234078af43198a4d15d5c736f1bbdac4e", 0xed, 0xa}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x80, r2, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4b7, 0x73}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c767771887ec"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="3ff3d43a0234"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="5a130d5af2d1"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d794f0ab5ac8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2d11d4bbba5d"}]}, 0x80}, 0x1, 0x0, 0x0, 0x2400c041}, 0x8890) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="cc0000002100010027bd7000fefffffffc020000000000000000000000000000fc020000000000000000000000000001dffc0000000000000a00e00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fe800000000000000000000000000011ac1414aa000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a002c0013"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 0s ago: executing program 1 (id=19660): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000520001000000000000fd00000a0000000c000600"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010027bd700402d4df2500000000", @ANYRES32=r3, @ANYBLOB="984e0600c16a01002c001280110001006272696467655f736c617665000000001400058006000200060000000500010010"], 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9f}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) socket$netlink(0x10, 0x3, 0x12) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)={0x1d4, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x1ac, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x180, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6, @loopback, 0x157}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x130, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}]}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x404c844}, 0x40000) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4040, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1a, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20488c0}, 0x0) kernel console output (not intermixed with test programs): aving as an active interface with an up link [ 1861.482518][ T6007] lo speed is unknown, defaulting to 1000 [ 1861.499860][ T6007] lo speed is unknown, defaulting to 1000 [ 1861.825434][ T6055] syzkaller0: entered allmulticast mode [ 1861.833599][ T6055] syzkaller0: entered promiscuous mode [ 1862.274254][ T6077] validate_nla: 3 callbacks suppressed [ 1862.274272][ T6077] netlink: 'syz.4.17862': attribute type 1 has an invalid length. [ 1862.309155][ T6082] netlink: 'syz.1.17864': attribute type 1 has an invalid length. [ 1862.320925][ T6082] netlink: 'syz.1.17864': attribute type 1 has an invalid length. [ 1862.827206][ T6079] lo speed is unknown, defaulting to 1000 [ 1862.857561][ T6079] lo speed is unknown, defaulting to 1000 [ 1863.023173][ T6119] openvswitch: netlink: Unknown key attributes 20 [ 1863.581054][ T6134] xt_ecn: cannot match TCP bits for non-tcp packets [ 1863.622052][ T6134] __nla_validate_parse: 6 callbacks suppressed [ 1863.622071][ T6134] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.17878'. [ 1863.904909][ T6143] netlink: 40 bytes leftover after parsing attributes in process `syz.4.17881'. [ 1865.938836][ T6257] netlink: 'syz.2.17912': attribute type 24 has an invalid length. [ 1866.015502][ T6260] netlink: 7 bytes leftover after parsing attributes in process `syz.3.17913'. [ 1866.047879][ T6267] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17915'. [ 1866.515886][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17919'. [ 1866.666389][ T6292] bond2: entered promiscuous mode [ 1866.674157][ T6292] bond2: entered allmulticast mode [ 1866.711442][ T6292] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1867.080460][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17928'. [ 1867.096323][ T6321] netlink: 'syz.4.17929': attribute type 39 has an invalid length. [ 1867.647081][ T6342] bond16: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1867.691043][ T6342] bond16: (slave lo): Enslaving as an active interface with an up link [ 1867.750205][ T6342] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1867.771622][ T3142] lo speed is unknown, defaulting to 1000 [ 1867.777521][ T3112] lo speed is unknown, defaulting to 1000 [ 1867.783253][ T3112] sy2: Port: 1 Link ACTIVE [ 1867.915118][ T6360] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17939'. [ 1868.102627][ T6367] sctp: [Deprecated]: syz.3.17941 (pid 6367) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1868.102627][ T6367] Use struct sctp_sack_info instead [ 1868.143273][ T6369] netlink: 'syz.0.17944': attribute type 3 has an invalid length. [ 1868.198080][ T6374] netlink: 'syz.2.17945': attribute type 5 has an invalid length. [ 1868.236002][ T6380] netlink: 'syz.3.17946': attribute type 1 has an invalid length. [ 1868.313099][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17946'. [ 1868.317505][ T6380] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1868.342688][ T6385] bond16: (slave bridge10): making interface the new active one [ 1868.351139][ T6385] bond16: (slave bridge10): Enslaving as an active interface with an up link [ 1868.690841][ T6401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17955'. [ 1868.708190][T28971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1868.825457][ T6406] ip6t_srh: unknown srh invflags 4000 [ 1869.218733][ T6429] netlink: 'syz.4.17963': attribute type 1 has an invalid length. [ 1869.351284][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17963'. [ 1869.484498][ T6428] bridge0: port 2(bridge_slave_1) entered disabled state [ 1869.492103][ T6428] bridge0: port 1(1x9) entered disabled state [ 1869.754437][ T6428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1869.768152][ T6428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1869.802759][ T3139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1870.310836][ T6429] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1870.517868][T24577] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1870.596317][T24577] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1870.631826][T24577] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1870.672418][T24577] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1870.710221][T24577] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1870.748071][T24577] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1870.788096][T24577] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1870.826835][ T7128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1870.843006][T24577] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1870.909625][ T6482] netlink: 'syz.4.17975': attribute type 4 has an invalid length. [ 1870.981432][ T6481] FAULT_INJECTION: forcing a failure. [ 1870.981432][ T6481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1870.999598][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1871.016630][ T6481] CPU: 1 UID: 0 PID: 6481 Comm: syz.2.17974 Not tainted syzkaller #0 PREEMPT(full) [ 1871.016656][ T6481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1871.016667][ T6481] Call Trace: [ 1871.016674][ T6481] [ 1871.016682][ T6481] dump_stack_lvl+0xe8/0x150 [ 1871.016715][ T6481] should_fail_ex+0x40c/0x560 [ 1871.016743][ T6481] _copy_from_iter+0x1d3/0x1660 [ 1871.016767][ T6481] ? rcu_is_watching+0x15/0xb0 [ 1871.016800][ T6481] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 1871.016824][ T6481] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1871.016851][ T6481] ? __pfx__copy_from_iter+0x10/0x10 [ 1871.016874][ T6481] ? irqentry_exit+0x218/0x8f0 [ 1871.016898][ T6481] ? lockdep_hardirqs_on+0x7a/0x110 [ 1871.016921][ T6481] ? irqentry_exit+0x218/0x8f0 [ 1871.016942][ T6481] ? trace_irq_disable+0x3b/0x140 [ 1871.016975][ T6481] skb_copy_datagram_from_iter+0xe6/0x720 [ 1871.017093][ T6481] tun_get_user+0x1520/0x4370 [ 1871.017183][ T6481] ? aa_file_perm+0x18b/0x15f0 [ 1871.017207][ T6481] ? aa_file_perm+0x4ed/0x15f0 [ 1871.017227][ T6481] ? __pfx_tun_get_user+0x10/0x10 [ 1871.017253][ T6481] ? __lock_acquire+0x683/0x2cf0 [ 1871.017282][ T6481] ? kstrtoull+0x12f/0x1d0 [ 1871.017310][ T6481] ? ref_tracker_alloc+0x341/0x4b0 [ 1871.017332][ T6481] ? get_pid_task+0x20/0x1f0 [ 1871.017360][ T6481] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1871.017383][ T6481] ? tun_get+0x1c/0x2f0 [ 1871.017407][ T6481] ? tun_get+0x1c/0x2f0 [ 1871.017434][ T6481] ? tun_get+0x1c/0x2f0 [ 1871.017456][ T6481] ? tun_get+0x1c/0x2f0 [ 1871.017484][ T6481] tun_chr_write_iter+0x113/0x200 [ 1871.017510][ T6481] vfs_write+0x612/0xba0 [ 1871.017546][ T6481] ? __pfx_vfs_write+0x10/0x10 [ 1871.017585][ T6481] ? __fget_files+0x2a/0x420 [ 1871.017618][ T6481] ksys_write+0x150/0x270 [ 1871.017648][ T6481] ? __pfx_ksys_write+0x10/0x10 [ 1871.017684][ T6481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1871.017706][ T6481] do_syscall_64+0x174/0x580 [ 1871.017732][ T6481] ? clear_bhb_loop+0x40/0x90 [ 1871.017756][ T6481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1871.017775][ T6481] RIP: 0033:0x7f1039b9de59 [ 1871.017802][ T6481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1871.017819][ T6481] RSP: 002b:00007f103aa0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1871.017839][ T6481] RAX: ffffffffffffffda RBX: 00007f1039e25fa0 RCX: 00007f1039b9de59 [ 1871.017854][ T6481] RDX: 0000000000000072 RSI: 0000200000000100 RDI: 0000000000000003 [ 1871.017866][ T6481] RBP: 00007f103aa0d090 R08: 0000000000000000 R09: 0000000000000000 [ 1871.017879][ T6481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1871.017891][ T6481] R13: 00007f1039e26038 R14: 00007f1039e25fa0 R15: 00007ffda3bfcc38 [ 1871.017922][ T6481] [ 1871.018493][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1871.305586][ T6495] netlink: 'syz.4.17978': attribute type 1 has an invalid length. [ 1871.316223][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1871.339611][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1871.347247][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1871.536733][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17980'. [ 1871.547866][ T6504] openvswitch: netlink: Flow key attribute not present in set flow. [ 1871.673475][ T6512] netlink: 'syz.0.17981': attribute type 1 has an invalid length. [ 1871.715394][ T6512] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1871.724108][ T6509] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17982'. [ 1871.745420][T24574] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1871.748179][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17981'. [ 1871.756756][T24574] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1871.775423][T14963] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1871.800436][ T6512] bond10: (slave bridge10): making interface the new active one [ 1871.817467][ T6512] bond10: (slave bridge10): Enslaving as an active interface with an up link [ 1871.865476][T14963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1872.062314][ T6521] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17984'. [ 1872.079557][ T6521] xt_hashlimit: size too large, truncated to 1048576 [ 1872.145479][T14963] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1872.229843][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17987'. [ 1872.250588][ T6532] netlink: 'syz.2.17986': attribute type 1 has an invalid length. [ 1872.295374][ T6532] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17986'. [ 1872.306454][T14963] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1872.335017][ T6532] netlink: 3 bytes leftover after parsing attributes in process `syz.2.17986'. [ 1872.406213][ T6535] xt_hashlimit: size too large, truncated to 1048576 [ 1872.485962][ T6488] lo speed is unknown, defaulting to 1000 [ 1872.493396][ T6488] lo speed is unknown, defaulting to 1000 [ 1872.907258][T14963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1872.924332][ T6463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1873.338474][ T6567] netlink: 'syz.1.17996': attribute type 12 has an invalid length. [ 1873.338729][ T6488] bridge0: port 1(bridge_slave_0) entered blocking state [ 1873.367062][ T6488] bridge0: port 1(bridge_slave_0) entered disabled state [ 1873.374340][ T6488] bridge_slave_0: entered allmulticast mode [ 1873.386205][ T6488] bridge_slave_0: entered promiscuous mode [ 1873.398479][ T6488] bridge0: port 2(bridge_slave_1) entered blocking state [ 1873.406117][ T6488] bridge0: port 2(bridge_slave_1) entered disabled state [ 1873.413387][ T6488] bridge_slave_1: entered allmulticast mode [ 1873.422010][ T6488] bridge_slave_1: entered promiscuous mode [ 1873.460821][ T6488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1873.486197][T12899] Bluetooth: hci2: command tx timeout [ 1873.514507][ T6488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1873.564181][ T6488] team0: Port device team_slave_0 added [ 1873.572973][ T6488] team0: Port device team_slave_1 added [ 1873.660900][ T6581] netlink: 1 bytes leftover after parsing attributes in process `syz.1.17998'. [ 1873.661570][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1873.677535][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1873.708333][ T6488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1873.722825][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1873.729933][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1873.756391][ T6488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1873.878518][ T6488] hsr_slave_0: entered promiscuous mode [ 1873.885279][ T6488] hsr_slave_1: entered promiscuous mode [ 1873.893053][ T6488] debugfs: 'hsr0' already exists in 'hsr' [ 1873.899106][ T6488] Cannot create hsr debugfs directory [ 1873.950000][ T7128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1874.012685][ T6589] macsec0: entered allmulticast mode [ 1874.174951][ T6488] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1874.187871][ T6488] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1874.198143][ T6488] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1874.208313][ T6488] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 1874.422602][ T6596] netlink: 'syz.2.18003': attribute type 1 has an invalid length. [ 1874.463182][ T6596] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1874.508014][ T6596] vlan2: entered allmulticast mode [ 1874.514573][ T6596] bond13: (slave vlan2): Opening slave failed [ 1874.622699][ T6605] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1874.630827][ T6605] syzkaller1: linktype set to 823 [ 1874.707210][ T6488] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1874.717507][ T6488] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1874.727765][ T6488] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1874.737929][ T6488] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 1875.042411][T14963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1875.112005][ T6488] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1875.125088][ T6488] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1875.136312][ T6488] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1875.148372][ T6488] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 1875.206262][ T6629] Bluetooth: MGMT ver 1.23 [ 1875.390389][ T6488] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1875.401473][ T6488] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1875.411872][ T6488] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1875.424487][ T6488] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 1875.447870][ C1] Unknown status report in ack skb [ 1875.453480][ C0] Unknown status report in ack skb [ 1875.464418][ T6641] __nla_validate_parse: 1 callbacks suppressed [ 1875.464433][ T6641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18017'. [ 1875.480700][ T6641] netlink: 60 bytes leftover after parsing attributes in process `syz.4.18017'. [ 1875.491130][ T6641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18017'. [ 1875.500412][ T6641] netlink: 60 bytes leftover after parsing attributes in process `syz.4.18017'. [ 1875.510024][ T6641] netlink: 104 bytes leftover after parsing attributes in process `syz.4.18017'. [ 1875.545154][T12899] Bluetooth: hci2: command tx timeout [ 1875.572802][ T6645] netlink: 'syz.4.18018': attribute type 1 has an invalid length. [ 1875.633104][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18018'. [ 1875.660397][ T6648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18019'. [ 1875.692570][ T6645] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1875.705324][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1875.762708][ T6488] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1875.772754][ T6488] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1875.780670][ T6488] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1875.784173][ T6652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18020'. [ 1875.818623][ T6488] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1875.858477][ T6652] netlink: 'syz.1.18020': attribute type 1 has an invalid length. [ 1875.872405][ T6652] netlink: 'syz.1.18020': attribute type 2 has an invalid length. [ 1875.886099][ T6488] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1875.898684][ T6488] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1875.923963][ T6488] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1875.943476][ T6488] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1876.105691][T14963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1876.142793][ T6488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1876.182395][ T6488] 8021q: adding VLAN 0 to HW filter on device team0 [ 1876.199848][ T5712] bridge0: port 1(bridge_slave_0) entered blocking state [ 1876.207004][ T5712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1876.221597][T24577] bridge0: port 2(bridge_slave_1) entered blocking state [ 1876.228752][T24577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1876.722426][ T6488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1876.758350][ T6488] veth0_vlan: entered promiscuous mode [ 1876.771901][ T6488] veth1_vlan: entered promiscuous mode [ 1876.839031][ T6488] veth0_macvtap: entered promiscuous mode [ 1876.852146][ T6488] veth1_macvtap: entered promiscuous mode [ 1876.872595][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1876.884046][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1876.950682][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18030'. [ 1876.970748][ T6689] macsec1: entered promiscuous mode [ 1876.976220][ T6689] bridge0: entered promiscuous mode [ 1876.981694][ T6689] macsec1: entered allmulticast mode [ 1876.991928][ T6689] bridge0: entered allmulticast mode [ 1876.999970][ T6689] bridge0: port 3(macsec1) entered blocking state [ 1877.007033][ T6689] bridge0: port 3(macsec1) entered disabled state [ 1877.029582][ T6689] bridge0: left allmulticast mode [ 1877.060179][T14963] bridge0: left promiscuous mode [ 1877.089589][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1877.102276][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1877.146626][ T7128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1877.167635][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1877.190638][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1877.376388][ T6716] bond14: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1877.390347][ T6716] bond14 (unregistering): Released all slaves [ 1877.434073][T24574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1877.482029][T24574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1877.515126][ T5712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1877.526403][ T6721] syzkaller0: entered promiscuous mode [ 1877.531879][ T6721] syzkaller0: entered allmulticast mode [ 1877.538500][ T5712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1877.625852][T12899] Bluetooth: hci2: command tx timeout [ 1877.826441][ T6727] Cannot find set identified by id 0 to match [ 1877.923825][ T6738] netlink: 76 bytes leftover after parsing attributes in process `syz.3.18044'. [ 1878.032724][ T6742] netlink: 'syz.2.18046': attribute type 1 has an invalid length. [ 1878.092881][ T6742] bond14: entered promiscuous mode [ 1878.098735][ T6742] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1878.186113][ T6467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1878.202827][ T6749] FAULT_INJECTION: forcing a failure. [ 1878.202827][ T6749] name failslab, interval 1, probability 0, space 0, times 0 [ 1878.215539][ T6749] CPU: 0 UID: 0 PID: 6749 Comm: syz.3.18049 Not tainted syzkaller #0 PREEMPT(full) [ 1878.215564][ T6749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1878.215576][ T6749] Call Trace: [ 1878.215584][ T6749] [ 1878.215593][ T6749] dump_stack_lvl+0xe8/0x150 [ 1878.215627][ T6749] should_fail_ex+0x40c/0x560 [ 1878.215656][ T6749] should_failslab+0xa8/0x100 [ 1878.215686][ T6749] kmem_cache_alloc_bulk_noprof+0x8b/0x7b0 [ 1878.215713][ T6749] ? pfn_valid+0x125/0x4c0 [ 1878.215805][ T6749] ? pfn_valid+0x125/0x4c0 [ 1878.215824][ T6749] ? pfn_valid+0x125/0x4c0 [ 1878.215847][ T6749] bpf_test_run_xdp_live+0x16e9/0x1c20 [ 1878.215890][ T6749] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 1878.215930][ T6749] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1878.215961][ T6749] ? 0xffffffffa0205540 [ 1878.216028][ T6749] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1878.216056][ T6749] ? _copy_from_user+0x94/0xb0 [ 1878.216084][ T6749] ? bpf_test_init+0x113/0x150 [ 1878.216110][ T6749] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1878.216142][ T6749] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 1878.216188][ T6749] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1878.216222][ T6749] ? __fget_files+0x2a/0x420 [ 1878.216253][ T6749] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1878.216290][ T6749] bpf_prog_test_run+0x2c5/0x340 [ 1878.216321][ T6749] __sys_bpf+0xa22/0xd90 [ 1878.216355][ T6749] ? __pfx___sys_bpf+0x10/0x10 [ 1878.216391][ T6749] ? __fget_files+0x2a/0x420 [ 1878.216434][ T6749] ? ksys_write+0x242/0x270 [ 1878.216464][ T6749] ? __pfx_ksys_write+0x10/0x10 [ 1878.216499][ T6749] __x64_sys_bpf+0xba/0xd0 [ 1878.216521][ T6749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1878.216544][ T6749] do_syscall_64+0x174/0x580 [ 1878.216569][ T6749] ? trace_irq_disable+0x3b/0x140 [ 1878.216594][ T6749] ? clear_bhb_loop+0x40/0x90 [ 1878.216618][ T6749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1878.216638][ T6749] RIP: 0033:0x7f7a9d39de59 [ 1878.216656][ T6749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1878.216673][ T6749] RSP: 002b:00007f7a9e1f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1878.216694][ T6749] RAX: ffffffffffffffda RBX: 00007f7a9d625fa0 RCX: 00007f7a9d39de59 [ 1878.216709][ T6749] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1878.216721][ T6749] RBP: 00007f7a9e1f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1878.216733][ T6749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1878.216744][ T6749] R13: 00007f7a9d626038 R14: 00007f7a9d625fa0 R15: 00007ffc0a542c98 [ 1878.216774][ T6749] [ 1878.549739][ T6742] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1878.557373][ T6742] bond14: (slave vti1): The slave device specified does not support setting the MAC address [ 1878.568541][ T6742] bond14: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 1878.581649][ T6742] bond14: (slave vti1): making interface the new active one [ 1878.592940][ T6742] vti1: entered promiscuous mode [ 1878.600114][ T6742] bond14: (slave vti1): Enslaving as an active interface with an up link [ 1878.736400][ T30] audit: type=1107 audit(1783342742.093:36): pid=6763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='L97mYs,t|K3Et{Qs'X^fXKAz`'l$ Ƙ5Vűߊ [ 1879.342966][ T6791] dump_stack_lvl+0xe8/0x150 [ 1879.343001][ T6791] should_fail_ex+0x40c/0x560 [ 1879.343029][ T6791] should_failslab+0xa8/0x100 [ 1879.343060][ T6791] kmem_cache_alloc_bulk_noprof+0x8b/0x7b0 [ 1879.343088][ T6791] ? pfn_valid+0x125/0x4c0 [ 1879.343109][ T6791] ? pfn_valid+0x125/0x4c0 [ 1879.343128][ T6791] ? pfn_valid+0x125/0x4c0 [ 1879.343151][ T6791] bpf_test_run_xdp_live+0x16e9/0x1c20 [ 1879.343194][ T6791] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 1879.343235][ T6791] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1879.343272][ T6791] ? 0xffffffffa0205540 [ 1879.343341][ T6791] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1879.343374][ T6791] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1879.343406][ T6791] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 1879.343451][ T6791] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1879.343486][ T6791] ? __fget_files+0x2a/0x420 [ 1879.343517][ T6791] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1879.343547][ T6791] bpf_prog_test_run+0x2c5/0x340 [ 1879.343579][ T6791] __sys_bpf+0xa22/0xd90 [ 1879.343613][ T6791] ? __pfx___sys_bpf+0x10/0x10 [ 1879.343650][ T6791] ? __fget_files+0x2a/0x420 [ 1879.343693][ T6791] ? ksys_write+0x242/0x270 [ 1879.343724][ T6791] ? __pfx_ksys_write+0x10/0x10 [ 1879.343758][ T6791] __x64_sys_bpf+0xba/0xd0 [ 1879.343781][ T6791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1879.343803][ T6791] do_syscall_64+0x174/0x580 [ 1879.343831][ T6791] ? clear_bhb_loop+0x40/0x90 [ 1879.343856][ T6791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1879.343875][ T6791] RIP: 0033:0x7fe77239de59 [ 1879.343892][ T6791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1879.343910][ T6791] RSP: 002b:00007fe773205028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1879.343931][ T6791] RAX: ffffffffffffffda RBX: 00007fe772625fa0 RCX: 00007fe77239de59 [ 1879.343946][ T6791] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1879.343959][ T6791] RBP: 00007fe773205090 R08: 0000000000000000 R09: 0000000000000000 [ 1879.343972][ T6791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1879.343984][ T6791] R13: 00007fe772626038 R14: 00007fe772625fa0 R15: 00007fff68509cb8 [ 1879.344018][ T6791] [ 1879.741536][T12899] Bluetooth: hci2: command tx timeout [ 1879.768206][ T6800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1880.094523][ T6815] netlink: 'syz.1.18068': attribute type 1 has an invalid length. [ 1880.241541][ T6823] netlink: 'syz.4.18073': attribute type 1 has an invalid length. [ 1880.269412][T17950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1880.305689][ T6828] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1880.307878][ T6823] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1880.394216][ T6823] bond4: (slave geneve2): making interface the new active one [ 1880.403827][ T6823] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1880.422383][ T6829] syzkaller0: entered promiscuous mode [ 1880.427881][ T6829] syzkaller0: entered allmulticast mode [ 1880.546207][ T6836] bridge0: port 1(bridge_slave_0) entered listening state [ 1881.197076][ T6855] __nla_validate_parse: 9 callbacks suppressed [ 1881.197094][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18083'. [ 1881.218375][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18083'. [ 1881.218783][ T6860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18084'. [ 1881.227424][ T6855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18083'. [ 1881.235563][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18083'. [ 1881.241288][T24578] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1881.242147][T24578] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1881.242646][T24578] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1881.247639][T24578] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1881.310745][ T6860] xfrm1: entered promiscuous mode [ 1881.316850][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18083'. [ 1881.323308][ T6860] xfrm1: entered allmulticast mode [ 1881.326347][ T6467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1881.331727][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18080'. [ 1881.346402][ T6855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18083'. [ 1881.365361][ T6854] netlink: 'syz.1.18083': attribute type 4 has an invalid length. [ 1881.373178][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18083'. [ 1881.382353][ T6861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18084'. [ 1881.395658][ T6862] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1881.539211][ T6871] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1881.559300][ T6873] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1882.056419][ T6902] xt_nat: multiple ranges no longer supported [ 1882.283009][ T6915] netlink: 'syz.1.18102': attribute type 2 has an invalid length. [ 1882.295033][ T6915] netlink: 'syz.1.18102': attribute type 1 has an invalid length. [ 1882.347155][ T6467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1882.356693][ T6923] syzkaller0: entered promiscuous mode [ 1882.362277][ T6923] syzkaller0: entered allmulticast mode [ 1882.450228][ T6463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1882.663808][ T6940] syzkaller0: entered allmulticast mode [ 1882.675597][ T6940] tipc: Enabled bearer , priority 0 [ 1882.686475][ T6939] tipc: Disabling bearer [ 1882.785870][ T6942] FAULT_INJECTION: forcing a failure. [ 1882.785870][ T6942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1882.799213][ T6942] CPU: 0 UID: 0 PID: 6942 Comm: syz.0.18110 Not tainted syzkaller #0 PREEMPT(full) [ 1882.799228][ T6942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1882.799235][ T6942] Call Trace: [ 1882.799240][ T6942] [ 1882.799244][ T6942] dump_stack_lvl+0xe8/0x150 [ 1882.799266][ T6942] should_fail_ex+0x40c/0x560 [ 1882.799281][ T6942] _copy_to_user+0x31/0xb0 [ 1882.799299][ T6942] simple_read_from_buffer+0xe1/0x170 [ 1882.799316][ T6942] proc_fail_nth_read+0x1bb/0x230 [ 1882.799333][ T6942] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1882.799349][ T6942] ? rw_verify_area+0x24a/0x4c0 [ 1882.799365][ T6942] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1882.799378][ T6942] vfs_read+0x213/0xa80 [ 1882.799396][ T6942] ? __pfx___mutex_lock+0x10/0x10 [ 1882.799412][ T6942] ? __pfx_vfs_read+0x10/0x10 [ 1882.799428][ T6942] ? __fget_files+0x2a/0x420 [ 1882.799444][ T6942] ? __fget_files+0x3a2/0x420 [ 1882.799457][ T6942] ? __fget_files+0x2a/0x420 [ 1882.799474][ T6942] ksys_read+0x150/0x270 [ 1882.799491][ T6942] ? __pfx_ksys_read+0x10/0x10 [ 1882.799511][ T6942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1882.799522][ T6942] do_syscall_64+0x174/0x580 [ 1882.799536][ T6942] ? trace_irq_disable+0x3b/0x140 [ 1882.799550][ T6942] ? clear_bhb_loop+0x40/0x90 [ 1882.799562][ T6942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1882.799572][ T6942] RIP: 0033:0x7fc8c995e68e [ 1882.799583][ T6942] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1882.799592][ T6942] RSP: 002b:00007fc8ca7a1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1882.799604][ T6942] RAX: ffffffffffffffda RBX: 00007fc8ca7a26c0 RCX: 00007fc8c995e68e [ 1882.799612][ T6942] RDX: 000000000000000f RSI: 00007fc8ca7a20a0 RDI: 0000000000000004 [ 1882.799618][ T6942] RBP: 00007fc8ca7a2090 R08: 0000000000000000 R09: 0000000000000000 [ 1882.799624][ T6942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1882.799630][ T6942] R13: 00007fc8c9c26038 R14: 00007fc8c9c25fa0 R15: 00007ffe1cb1b278 [ 1882.799647][ T6942] [ 1883.264420][ T6952] syzkaller0: entered promiscuous mode [ 1883.270904][ T6952] syzkaller0: entered allmulticast mode [ 1883.388239][T17950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1883.464717][ T6955] netlink: 'syz.1.18114': attribute type 10 has an invalid length. [ 1883.497273][ T6960] netlink: 'syz.4.18116': attribute type 1 has an invalid length. [ 1883.706394][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1884.426444][ T6467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1885.469046][T17950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1886.452294][ T6953] syzkaller0: entered promiscuous mode [ 1886.458021][ T6953] syzkaller0: entered allmulticast mode [ 1886.493390][ T6955] geneve3: entered promiscuous mode [ 1886.500152][ T6955] geneve3: entered allmulticast mode [ 1886.506152][T17950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1886.991708][ T6984] syzkaller0: entered promiscuous mode [ 1887.032904][ T6984] syzkaller0: entered allmulticast mode [ 1887.195991][ T7000] validate_nla: 64 callbacks suppressed [ 1887.196009][ T7000] netlink: 'syz.3.18127': attribute type 1 has an invalid length. [ 1887.254012][ T7000] __nla_validate_parse: 74 callbacks suppressed [ 1887.254091][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18127'. [ 1887.350810][ T7006] netlink: 'syz.2.18128': attribute type 10 has an invalid length. [ 1887.383041][ T7006] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18128'. [ 1887.418776][ T7006] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1887.549176][T14963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1887.908812][ T7027] netlink: 44 bytes leftover after parsing attributes in process `syz.0.18139'. [ 1887.996302][ T7034] netlink: 'syz.4.18141': attribute type 20 has an invalid length. [ 1888.009569][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18141'. [ 1888.068563][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1888.074767][ T7034] netlink: 'syz.4.18141': attribute type 20 has an invalid length. [ 1888.077362][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1888.077399][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1888.077434][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1888.148485][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18141'. [ 1888.161652][ T7040] netlink: 'syz.2.18143': attribute type 1 has an invalid length. [ 1888.196814][ T7040] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1888.208032][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18143'. [ 1888.230750][ T7040] bond15: (slave bridge11): making interface the new active one [ 1888.239596][ T7040] bond15: (slave bridge11): Enslaving as an active interface with an up link [ 1888.356279][ T7049] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.18144'. [ 1888.585553][T14963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1889.039965][ T7058] netlink: 3668 bytes leftover after parsing attributes in process `syz.4.18149'. [ 1889.137097][ T7060] syzkaller0: entered promiscuous mode [ 1889.156027][ T7060] syzkaller0: entered allmulticast mode [ 1889.182738][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18150'. [ 1889.212806][ T7069] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.18153'. [ 1889.227640][ T7075] netlink: 'syz.2.18155': attribute type 1 has an invalid length. [ 1889.273347][ T7071] syzkaller0: entered promiscuous mode [ 1889.278895][ T7071] syzkaller0: entered allmulticast mode [ 1889.338286][ T7075] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1889.377607][ T7080] bond16: (slave bridge12): making interface the new active one [ 1889.385872][ T7080] bond16: (slave bridge12): Enslaving as an active interface with an up link [ 1889.625726][T14963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1890.411258][ T7084] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1890.669149][T17950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1891.710558][T14963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1892.032233][ T6463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1892.753477][T17950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1892.909884][ T7067] syzkaller0: entered promiscuous mode [ 1892.916725][ T7067] syzkaller0: entered allmulticast mode [ 1892.930039][ T7091] xfrm1: entered allmulticast mode [ 1893.098991][ T7109] FAULT_INJECTION: forcing a failure. [ 1893.098991][ T7109] name failslab, interval 1, probability 0, space 0, times 0 [ 1893.111695][ T7109] CPU: 0 UID: 0 PID: 7109 Comm: syz.1.18160 Not tainted syzkaller #0 PREEMPT(full) [ 1893.111720][ T7109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1893.111732][ T7109] Call Trace: [ 1893.111742][ T7109] [ 1893.111751][ T7109] dump_stack_lvl+0xe8/0x150 [ 1893.111785][ T7109] should_fail_ex+0x40c/0x560 [ 1893.111814][ T7109] should_failslab+0xa8/0x100 [ 1893.111843][ T7109] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1893.111868][ T7109] ? dst_alloc+0x105/0x170 [ 1893.111971][ T7109] ? dst_alloc+0x105/0x170 [ 1893.111996][ T7109] dst_alloc+0x105/0x170 [ 1893.112019][ T7109] ip_route_input_rcu+0x20ca/0x3190 [ 1893.112123][ T7109] ? udp_rcv+0xd3e/0x1db0 [ 1893.112209][ T7109] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 1893.112263][ T7109] ? ip_check_mc_rcu+0x400/0x670 [ 1893.112311][ T7109] ? ip_route_input_noref+0xad/0x270 [ 1893.112338][ T7109] ip_route_input_noref+0x17c/0x270 [ 1893.112367][ T7109] ? __pfx_ip_route_input_noref+0x10/0x10 [ 1893.112396][ T7109] ? __pfx_udp_v4_early_demux+0x10/0x10 [ 1893.112423][ T7109] ? NF_HOOK+0x9e/0x3c0 [ 1893.112443][ T7109] ? __pfx_NF_HOOK+0x10/0x10 [ 1893.112464][ T7109] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1893.112489][ T7109] ip_rcv_finish_core+0x593/0x1c00 [ 1893.112524][ T7109] ip_sublist_rcv+0x3ab/0xa70 [ 1893.112559][ T7109] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 1893.112586][ T7109] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1893.112606][ T7109] ? ip_rcv_core+0x88d/0xd50 [ 1893.112635][ T7109] ip_list_rcv+0x3ec/0x440 [ 1893.112665][ T7109] ? __pfx_ip_list_rcv+0x10/0x10 [ 1893.112685][ T7109] ? kasan_save_track+0x4f/0x80 [ 1893.112710][ T7109] ? __kasan_slab_alloc+0x6c/0x80 [ 1893.112733][ T7109] ? kmem_cache_alloc_bulk_noprof+0x4a0/0x7b0 [ 1893.112759][ T7109] ? bpf_test_run_xdp_live+0x16e9/0x1c20 [ 1893.112788][ T7109] ? bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 1893.112815][ T7109] ? __pfx_ip_list_rcv+0x10/0x10 [ 1893.112837][ T7109] __netif_receive_skb_list_core+0x804/0x830 [ 1893.112877][ T7109] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 1893.112914][ T7109] netif_receive_skb_list_internal+0x995/0xcf0 [ 1893.112943][ T7109] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 1893.112965][ T7109] ? eth_type_trans+0x352/0x800 [ 1893.113031][ T7109] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 1893.113066][ T7109] ? __xdp_build_skb_from_frame+0x324/0x6a0 [ 1893.113199][ T7109] netif_receive_skb_list+0x67/0x480 [ 1893.113219][ T7109] ? bpf_test_run_xdp_live+0x185a/0x1c20 [ 1893.113253][ T7109] bpf_test_run_xdp_live+0x1875/0x1c20 [ 1893.113296][ T7109] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 1893.113338][ T7109] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1893.113368][ T7109] ? 0xffffffffa0205540 [ 1893.113440][ T7109] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1893.113468][ T7109] ? _copy_from_user+0x94/0xb0 [ 1893.113498][ T7109] ? bpf_test_init+0x113/0x150 [ 1893.113524][ T7109] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1893.113556][ T7109] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 1893.113604][ T7109] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1893.113639][ T7109] ? __fget_files+0x2a/0x420 [ 1893.113670][ T7109] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1893.113700][ T7109] bpf_prog_test_run+0x2c5/0x340 [ 1893.113731][ T7109] __sys_bpf+0xa22/0xd90 [ 1893.113766][ T7109] ? __pfx___sys_bpf+0x10/0x10 [ 1893.113804][ T7109] ? __fget_files+0x2a/0x420 [ 1893.113848][ T7109] ? ksys_write+0x242/0x270 [ 1893.113880][ T7109] ? __pfx_ksys_write+0x10/0x10 [ 1893.113915][ T7109] __x64_sys_bpf+0xba/0xd0 [ 1893.113939][ T7109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1893.113961][ T7109] do_syscall_64+0x174/0x580 [ 1893.113988][ T7109] ? trace_irq_disable+0x3b/0x140 [ 1893.114012][ T7109] ? clear_bhb_loop+0x40/0x90 [ 1893.114036][ T7109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1893.114056][ T7109] RIP: 0033:0x7f7c7f99de59 [ 1893.114075][ T7109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1893.114092][ T7109] RSP: 002b:00007f7c80806028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1893.114113][ T7109] RAX: ffffffffffffffda RBX: 00007f7c7fc25fa0 RCX: 00007f7c7f99de59 [ 1893.114127][ T7109] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1893.114139][ T7109] RBP: 00007f7c80806090 R08: 0000000000000000 R09: 0000000000000000 [ 1893.114151][ T7109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1893.114164][ T7109] R13: 00007f7c7fc26038 R14: 00007f7c7fc25fa0 R15: 00007ffc21ed9f48 [ 1893.114205][ T7109] [ 1893.797581][T14963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1894.151183][ T7121] __nla_validate_parse: 2 callbacks suppressed [ 1894.151201][ T7121] netlink: 36 bytes leftover after parsing attributes in process `syz.1.18163'. [ 1894.285947][ T7126] netlink: 'syz.0.18166': attribute type 1 has an invalid length. [ 1894.317149][ T7126] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1894.329324][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18166'. [ 1894.354769][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18167'. [ 1894.363786][ T7126] bond11: (slave bridge11): making interface the new active one [ 1894.372458][ T7126] bond11: (slave bridge11): Enslaving as an active interface with an up link [ 1894.826352][T14963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1894.877135][ T7151] netlink: 'syz.1.18170': attribute type 21 has an invalid length. [ 1894.923880][ T7151] IPv6: NLM_F_CREATE should be specified when creating new route [ 1894.957728][ T7151] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1894.965015][ T7151] IPv6: NLM_F_CREATE should be set when creating new route [ 1894.972297][ T7151] IPv6: NLM_F_CREATE should be set when creating new route [ 1894.979573][ T7151] IPv6: NLM_F_CREATE should be set when creating new route [ 1895.014481][ T7153] syzkaller0: entered promiscuous mode [ 1895.045518][ T7153] syzkaller0: entered allmulticast mode [ 1895.082612][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18171'. [ 1895.095130][ T7151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1895.692928][ T7177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18178'. [ 1895.731713][ T7179] netlink: 108 bytes leftover after parsing attributes in process `syz.1.18179'. [ 1895.754669][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18179'. [ 1895.827738][ T7177] syzkaller0: entered promiscuous mode [ 1895.837740][ T7177] syzkaller0: entered allmulticast mode [ 1895.865289][T14963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1895.896996][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1895.908165][ T6463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1895.921865][T14963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1895.982197][ T7194] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18185'. [ 1896.037666][ T7200] xt_l2tp: invalid flags combination: 8 [ 1896.260105][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18187'. [ 1896.320133][ T7221] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18193'. [ 1896.371058][ T7223] block nbd13: Unsupported socket: should be TCP or UNIX. [ 1896.659314][ T7231] netlink: 'syz.1.18198': attribute type 21 has an invalid length. [ 1896.668829][ T7231] netlink: 'syz.1.18198': attribute type 22 has an invalid length. [ 1896.678289][ T7231] netlink: 'syz.1.18198': attribute type 23 has an invalid length. [ 1896.689142][T24578] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1896.689216][T24578] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1896.689252][T24578] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1896.689286][T24578] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1896.730728][ T7231] netlink: 'syz.1.18198': attribute type 25 has an invalid length. [ 1896.774102][ T7237] netlink: 'syz.3.18199': attribute type 33 has an invalid length. [ 1896.795114][ T7240] tipc: Failed to remove unknown binding: 66,1,1/171428657:3721858623/3721858625 [ 1896.804259][ T7240] tipc: Failed to remove unknown binding: 66,1,1/171428657:3721858623/3721858625 [ 1896.895688][ T7237] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1896.911385][ T7237] bond1 (unregistering): Released all slaves [ 1896.989473][ T6467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1897.753843][ T7305] vlan1: entered promiscuous mode [ 1897.756680][ T7285] netlink: 'syz.3.18217': attribute type 23 has an invalid length. [ 1897.758906][ T7305] gretap0: entered promiscuous mode [ 1897.870706][ T7311] netlink: 'syz.4.18224': attribute type 1 has an invalid length. [ 1898.025252][T14963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1898.318818][ T7337] netlink: 'syz.3.18232': attribute type 1 has an invalid length. [ 1898.338320][ T7337] bond1: entered promiscuous mode [ 1898.343661][ T7337] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1899.072166][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1899.136059][ T6463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1899.152336][ T6467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1899.229787][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1899.241782][ T6467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1899.250569][ T6445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1899.290554][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802c829000: rx timeout, send abort [ 1899.299390][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802c829000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 1899.546835][ T7413] __nla_validate_parse: 15 callbacks suppressed [ 1899.546853][ T7413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18252'. [ 1899.643589][ T7418] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 1899.651956][ T7418] bond5: option packets_per_slave: allowed values 0 - 65535 [ 1899.661112][ T7418] bond5 (unregistering): Released all slaves [ 1899.668024][ T7421] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18255'. [ 1899.715622][ T7422] netlink: 52 bytes leftover after parsing attributes in process `syz.2.18253'. [ 1899.729500][ T7422] syzkaller0: entered allmulticast mode [ 1900.193810][T14963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1900.295078][ T7448] x_tables: unsorted entry at hook 1 [ 1900.313730][ T7448] netlink: 320 bytes leftover after parsing attributes in process `syz.3.18264'. [ 1900.327562][ T7448] validate_nla: 1 callbacks suppressed [ 1900.327576][ T7448] netlink: 'syz.3.18264': attribute type 1 has an invalid length. [ 1900.408510][ T7448] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1900.420104][ T7450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1900.462264][ T7454] bond2: (slave gretap1): making interface the new active one [ 1900.482564][ T7454] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1900.551552][ T7462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18269'. [ 1900.789058][ T7478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18275'. [ 1900.916556][ T7483] syzkaller0: entered promiscuous mode [ 1900.922280][ T7483] syzkaller0: entered allmulticast mode [ 1900.994106][ T7491] netlink: 'syz.0.18280': attribute type 1 has an invalid length. [ 1901.016138][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18281'. [ 1901.225248][ T6467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1901.293324][ T7511] syzkaller1: entered promiscuous mode [ 1901.298830][ T7511] syzkaller1: entered allmulticast mode [ 1901.328273][ T7511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1901.492351][ T7521] netlink: 6 bytes leftover after parsing attributes in process `syz.4.18288'. [ 1901.532252][ T7524] IPVS: Error connecting to the multicast addr [ 1901.627974][T24579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1901.650708][ T7530] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18293'. [ 1901.678261][ T7532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1901.710738][ T7532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1901.720586][ T7532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1901.743817][ T7532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1901.769395][ T7537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18295'. [ 1901.872083][ T7546] team0: Port device syz_tun removed [ 1901.923017][ T7546] bridge_slave_0: left allmulticast mode [ 1901.955241][ T7546] bridge_slave_0: left promiscuous mode [ 1901.961040][ T7546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1901.990204][ T7546] bridge_slave_1: left allmulticast mode [ 1901.995878][ T7546] bridge_slave_1: left promiscuous mode [ 1902.001635][ T7546] bridge0: port 2(bridge_slave_1) entered disabled state [ 1902.055199][ T7546] bond0: (slave bond_slave_0): Releasing backup interface [ 1902.073763][ T7546] bond0: (slave bond_slave_1): Releasing backup interface [ 1902.114947][ T7546] team0: Port device team_slave_0 removed [ 1902.153858][ T7557] netlink: 'syz.1.18299': attribute type 1 has an invalid length. [ 1902.251833][ T7546] team0: Port device team_slave_1 removed [ 1902.261258][ T7546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1902.272919][ T7546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1902.288951][ T7546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1902.306126][ T7546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1902.380295][ T7551] tipc: Started in network mode [ 1902.386930][ T7551] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1902.394227][ T7551] tipc: Enabled bearer , priority 0 [ 1902.406352][T24574] tipc: Resetting bearer [ 1902.413555][ T7557] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR [ 1902.595807][ T7571] netlink: 'syz.1.18302': attribute type 1 has an invalid length. [ 1902.672331][ T7571] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1902.710757][ T7575] vlan3: entered allmulticast mode [ 1902.716238][ T7575] bond19: entered allmulticast mode [ 1902.753885][ T7571] bond19: (slave geneve3): making interface the new active one [ 1902.761922][ T7571] geneve3: entered allmulticast mode [ 1902.775956][ T7571] bond19: (slave geneve3): Enslaving as an active interface with an up link [ 1902.921944][ T7587] netlink: 'syz.4.18308': attribute type 1 has an invalid length. [ 1903.014950][ T7587] bond5: entered promiscuous mode [ 1903.036215][ T7587] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1903.141326][ T7591] netlink: 'syz.2.18306': attribute type 12 has an invalid length. [ 1903.178258][ T7606] syzkaller0: entered promiscuous mode [ 1903.190482][ T7606] syzkaller0: entered allmulticast mode [ 1903.574082][ T3142] tipc: Node number set to 11578026 [ 1904.186082][ C0] net_ratelimit: 15 callbacks suppressed [ 1904.186103][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1904.203811][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1904.248806][ T7685] netlink: zone id is out of range [ 1904.253946][ T7685] netlink: zone id is out of range [ 1904.259791][ T7685] netlink: zone id is out of range [ 1904.649803][T24577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1904.661670][ T7713] __nla_validate_parse: 10 callbacks suppressed [ 1904.661686][ T7713] netlink: 19 bytes leftover after parsing attributes in process `syz.3.18343'. [ 1904.680327][T24577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1904.763011][ T6467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1904.831283][T24574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1904.841557][ T6467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1904.850772][ T3142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1905.257891][ T7750] netlink: 348 bytes leftover after parsing attributes in process `syz.3.18350'. [ 1905.961054][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18360'. [ 1906.108011][ T7794] mac80211_hwsim hwsim208 syzkaller0: entered promiscuous mode [ 1906.116147][ T7794] mac80211_hwsim hwsim208 syzkaller0: entered allmulticast mode [ 1906.334891][T24574] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1906.345409][T24574] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1906.356451][T24574] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1906.378888][T24574] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1906.751522][T24574] wlan0: Trigger new scan to find an IBSS to join [ 1906.822569][ T7840] netlink: 'syz.1.18375': attribute type 12 has an invalid length. [ 1906.930081][ T30] audit: type=1800 audit(1783342770.283:37): pid=7846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.18376" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2755 res=0 errno=0 [ 1907.146848][ T7856] bond20: Unable to set peer notification delay as MII monitoring is disabled [ 1907.166019][ T7856] bond20 (unregistering): Released all slaves [ 1907.229361][ T7866] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18382'. [ 1907.240968][ T7867] netlink: 'syz.2.18385': attribute type 1 has an invalid length. [ 1907.490782][ T7877] sit1: entered promiscuous mode [ 1907.496816][ T7877] sit1: entered allmulticast mode [ 1907.979149][ T7899] netlink: 'syz.4.18394': attribute type 11 has an invalid length. [ 1908.049798][ T7908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18395'. [ 1908.244411][ T7913] lo: entered allmulticast mode [ 1908.268145][ T7913] tunl0: entered allmulticast mode [ 1908.286380][ T7913] gre0: entered allmulticast mode [ 1908.346679][ T7913] gretap0: entered allmulticast mode [ 1908.408572][ T7913] erspan0: entered allmulticast mode [ 1908.442860][ T7913] ip_vti0: entered allmulticast mode [ 1908.469814][ T7913] ip6_vti0: entered allmulticast mode [ 1908.498971][ T7913] sit0: entered allmulticast mode [ 1908.526931][ T7913] ip6tnl0: entered allmulticast mode [ 1908.546200][ T7913] ip6gre0: entered allmulticast mode [ 1908.556343][ T7913] syz_tun: entered allmulticast mode [ 1908.710752][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18402'. [ 1909.040570][ T7946] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1909.047819][ T7946] IPv6: NLM_F_CREATE should be set when creating new route [ 1909.055141][ T7946] IPv6: NLM_F_CREATE should be set when creating new route [ 1909.062362][ T7946] IPv6: NLM_F_CREATE should be set when creating new route [ 1909.072417][ T7946] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1909.205694][ T7956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18407'. [ 1909.217483][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888025e2f800: rx timeout, send abort [ 1909.226744][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888025e2f800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1909.318170][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18409'. [ 1909.340332][ T7959] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1909.349179][ T7959] netlink: 152 bytes leftover after parsing attributes in process `syz.0.18409'. [ 1909.485547][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18412'. [ 1909.515275][ T7970] netlink: 'syz.0.18413': attribute type 1 has an invalid length. [ 1909.606761][ T7977] mac80211_hwsim hwsim208 syzkaller0: left promiscuous mode [ 1909.614876][ T7977] mac80211_hwsim hwsim208 syzkaller0: left allmulticast mode [ 1909.782875][ T7984] __nla_validate_parse: 2 callbacks suppressed [ 1909.782892][ T7984] netlink: 484 bytes leftover after parsing attributes in process `syz.2.18417'. [ 1910.187154][ T8000] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 1910.254107][ T8015] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18425'. [ 1910.283043][ T8017] netlink: 'syz.0.18426': attribute type 1 has an invalid length. [ 1910.290883][ T8017] netlink: 232 bytes leftover after parsing attributes in process `syz.0.18426'. [ 1910.300374][ T8017] netlink: 'syz.0.18426': attribute type 1 has an invalid length. [ 1910.317488][ T8017] netlink: 'syz.0.18426': attribute type 1 has an invalid length. [ 1910.325624][ T8017] netlink: 232 bytes leftover after parsing attributes in process `syz.0.18426'. [ 1910.386355][ T8017] netlink: 'syz.0.18426': attribute type 1 has an invalid length. [ 1910.586964][ T8033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18430'. [ 1910.666926][ T8038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18431'. [ 1910.719387][ T8039] net_ratelimit: 5 callbacks suppressed [ 1910.719405][ T8039] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1910.729833][ T8037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18433'. [ 1910.757591][ T8039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1910.877171][ T8051] netlink: 'syz.0.18437': attribute type 1 has an invalid length. [ 1910.932235][ T8051] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1910.948127][ T8051] bond12: (slave syz_tun): Enslaving as a backup interface with an up link [ 1911.051989][ T8063] pim6reg: entered allmulticast mode [ 1911.058846][ T8063] pim6reg: left allmulticast mode [ 1911.239357][ T8066] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1911.294804][ T8075] syzkaller0: entered promiscuous mode [ 1911.300314][ T8075] syzkaller0: entered allmulticast mode [ 1911.540247][ T8083] macvlan0: entered promiscuous mode [ 1911.578923][ T8089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18450'. [ 1911.653099][ T8093] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18451'. [ 1911.668177][ T8097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18452'. [ 1911.718150][T24578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1911.766197][ T8099] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 1911.945020][ T8105] bond13: Unable to set up delay as MII monitoring is disabled [ 1911.969166][ T8105] bond13 (unregistering): Released all slaves [ 1914.150854][ T8198] lo speed is unknown, defaulting to 1000 [ 1914.158276][ T8198] lo speed is unknown, defaulting to 1000 [ 1914.441910][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1914.603500][ T8261] syzkaller0: entered promiscuous mode [ 1914.610015][ T8261] syzkaller0: entered allmulticast mode [ 1914.712950][ T8268] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1914.723672][ T8275] netlink: 'syz.1.18498': attribute type 1 has an invalid length. [ 1914.811377][ T8278] __nla_validate_parse: 11 callbacks suppressed [ 1914.811396][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18498'. [ 1915.561407][ T8276] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1917.759561][ T8273] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1917.800216][ T8275] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1917.842162][ T8278] bond20: (slave bridge10): making interface the new active one [ 1917.854777][ T8278] bond20: (slave bridge10): Enslaving as an active interface with an up link [ 1917.961768][ T8291] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1918.260552][ T8315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18506'. [ 1918.283908][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18506'. [ 1918.634863][ T8333] netlink: 'syz.3.18514': attribute type 1 has an invalid length. [ 1918.662265][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18517'. [ 1918.686605][ T8340] netlink: 9 bytes leftover after parsing attributes in process `syz.4.18516'. [ 1918.710253][ T8333] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1918.721195][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18514'. [ 1918.730568][ T8340] netlink: 9 bytes leftover after parsing attributes in process `syz.4.18516'. [ 1918.744467][ T8333] bond3: (slave bridge3): making interface the new active one [ 1918.752886][ T8333] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 1918.978080][ T8353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18522'. [ 1918.997232][ T8355] netlink: 'syz.1.18523': attribute type 1 has an invalid length. [ 1919.061956][ T8355] netlink: 'syz.1.18523': attribute type 11 has an invalid length. [ 1919.069885][ T8355] netlink: 224 bytes leftover after parsing attributes in process `syz.1.18523'. [ 1919.074069][ T8361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18526'. [ 1919.277036][ T8377] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 1919.348804][ T8384] netlink: 'syz.2.18532': attribute type 1 has an invalid length. [ 1919.396328][ T8384] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1919.421180][ T8384] bond18: (slave bridge14): making interface the new active one [ 1919.429686][ T8384] bond18: (slave bridge14): Enslaving as an active interface with an up link [ 1919.797727][ T8415] tipc: Invalid UDP bearer configuration [ 1919.797779][ T8415] tipc: Enabling of bearer rejected, failed to enable media [ 1919.840569][ T8399] x_tables: duplicate underflow at hook 2 [ 1920.081484][ T8434] netlink: 'syz.0.18548': attribute type 1 has an invalid length. [ 1920.115061][ T8437] __nla_validate_parse: 6 callbacks suppressed [ 1920.115079][ T8437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18547'. [ 1920.143865][ T8434] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1920.155802][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18548'. [ 1920.213411][ T8434] bond13: (slave bridge12): making interface the new active one [ 1920.261588][ T8434] bond13: (slave bridge12): Enslaving as an active interface with an up link [ 1920.270858][ T8440] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1920.313280][ T8440] netlink: 27 bytes leftover after parsing attributes in process `syz.4.18549'. [ 1920.469725][ T8448] bond19: Unable to set peer notification delay as MII monitoring is disabled [ 1920.481877][ T8448] bond19 (unregistering): Released all slaves [ 1920.628537][ T8468] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18558'. [ 1920.645917][ T8468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1920.663204][ T8475] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18560'. [ 1920.798355][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18561'. [ 1920.841289][ T8482] netlink: 'syz.4.18563': attribute type 1 has an invalid length. [ 1920.922926][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18563'. [ 1920.945309][ T8482] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1921.011949][ T8491] bond6: (slave bridge3): making interface the new active one [ 1921.020282][ T8491] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 1921.361541][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18571'. [ 1921.401616][ T8512] netlink: 9 bytes leftover after parsing attributes in process `syz.0.18571'. [ 1921.424362][ T8512] 0: renamed from hsr0 [ 1921.457892][ T8512] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1921.480758][ T8512] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1921.491038][ T8512] 0: entered allmulticast mode [ 1921.495929][ T8512] hsr_slave_0: entered allmulticast mode [ 1921.501567][ T8512] hsr_slave_1: entered allmulticast mode [ 1921.508230][ T8512] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 1921.639922][ T8527] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1921.678056][ T8531] IPv6: NLM_F_CREATE should be specified when creating new route [ 1921.770268][ T8541] netlink: 'syz.4.18580': attribute type 58 has an invalid length. [ 1921.778905][ T8541] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18580'. [ 1921.926059][ T8549] bond0: (slave bond_slave_1): Releasing backup interface [ 1921.943094][ T8549] bond_slave_1: left promiscuous mode [ 1922.022498][ T8551] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1922.035504][ T8551] bond0: (slave bond7): Enslaving as an active interface with an up link [ 1922.092575][ T8560] tipc: Enabling of bearer rejected, failed to enable media [ 1922.271798][ T8564] netlink: 'syz.4.18587': attribute type 1 has an invalid length. [ 1922.907842][ T8611] xt_socket: unknown flags 0x8 [ 1922.964759][ T8608] syzkaller0: entered promiscuous mode [ 1922.970271][ T8608] syzkaller0: entered allmulticast mode [ 1926.449513][ T8637] netlink: 'syz.3.18612': attribute type 3 has an invalid length. [ 1926.483564][ T8637] netlink: 'syz.3.18612': attribute type 1 has an invalid length. [ 1926.517074][ T8637] __nla_validate_parse: 2 callbacks suppressed [ 1926.517091][ T8637] netlink: 236 bytes leftover after parsing attributes in process `syz.3.18612'. [ 1926.682257][ T8654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18617'. [ 1926.751452][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18617'. [ 1926.768287][ T8654] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1926.882450][ T8671] netlink: 48 bytes leftover after parsing attributes in process `syz.2.18620'. [ 1926.931808][ T8673] netlink: 'syz.3.18621': attribute type 5 has an invalid length. [ 1926.939657][ T8673] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18621'. [ 1926.969696][ T8675] syzkaller1: entered allmulticast mode [ 1927.187705][ T5630] Bluetooth: hci2: link tx timeout [ 1927.194048][ T5630] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1927.288887][ T8692] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.18626'. [ 1927.340820][ T8692] veth0_to_bond: default FDB implementation only supports local addresses [ 1927.578926][ T8702] netlink: 'syz.0.18632': attribute type 1 has an invalid length. [ 1927.664103][T30080] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1927.705648][T30080] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1927.740346][T30080] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1927.752988][T30080] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1927.763786][T30080] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1928.181614][ T8729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18639'. [ 1928.409856][ T8737] sctp: [Deprecated]: syz.3.18641 (pid 8737) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1928.409856][ T8737] Use struct sctp_sack_info instead [ 1928.435586][ T8737] sctp: [Deprecated]: syz.3.18641 (pid 8737) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1928.435586][ T8737] Use struct sctp_sack_info instead [ 1928.676328][T24573] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1928.688209][T24573] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1928.700444][T24573] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1928.746469][ T8705] lo speed is unknown, defaulting to 1000 [ 1928.769255][ T8705] lo speed is unknown, defaulting to 1000 [ 1928.977771][ T8757] syzkaller0: entered promiscuous mode [ 1928.987053][ T8757] syzkaller0: entered allmulticast mode [ 1929.018110][ T8759] gtp0: entered allmulticast mode [ 1929.035288][ T8759] team0: Port device gtp0 added [ 1929.046527][ T8771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18650'. [ 1929.145227][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1929.281314][ T5630] Bluetooth: hci2: command 0x0405 tx timeout [ 1929.628173][T24573] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1929.638825][T24573] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.649130][T24573] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1929.683655][ T8792] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18653'. [ 1929.725096][ T8794] netlink: 'syz.4.18654': attribute type 1 has an invalid length. [ 1929.732944][ T8794] netlink: 228 bytes leftover after parsing attributes in process `syz.4.18654'. [ 1929.873155][ T5630] Bluetooth: hci5: command tx timeout [ 1930.230327][T24573] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1930.283637][T24573] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1930.304057][T24573] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1930.324048][ T8705] bridge0: port 1(bridge_slave_0) entered blocking state [ 1930.331699][ T8705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1930.339170][ T8705] bridge_slave_0: entered allmulticast mode [ 1930.346421][ T8705] bridge_slave_0: entered promiscuous mode [ 1930.357733][ T8705] bridge0: port 2(bridge_slave_1) entered blocking state [ 1930.366093][ T8705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1930.373634][ T8705] bridge_slave_1: entered allmulticast mode [ 1930.386174][ T8705] bridge_slave_1: entered promiscuous mode [ 1930.458196][ T8827] syzkaller0: entered promiscuous mode [ 1930.464006][ T8827] syzkaller0: entered allmulticast mode [ 1930.513830][ T8705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1930.551142][ T8705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1930.643956][T24573] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1930.654303][T24573] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1930.664936][T24573] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1930.915997][ T8705] team0: Port device team_slave_0 added [ 1930.988153][ T8705] team0: Port device team_slave_1 added [ 1931.082327][ T8705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1931.094796][ T8705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1931.126644][ T8705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1931.159045][ T8705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1931.175456][ T8705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1931.202445][ T8705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1931.219049][ T8845] lo: entered allmulticast mode [ 1931.241547][ T8845] lo: left allmulticast mode [ 1931.304665][ T5630] Bluetooth: hci2: command 0x0405 tx timeout [ 1931.352412][ T8705] hsr_slave_0: entered promiscuous mode [ 1931.359155][ T8705] hsr_slave_1: entered promiscuous mode [ 1931.365522][ T8705] debugfs: 'hsr0' already exists in 'hsr' [ 1931.389456][ T8705] Cannot create hsr debugfs directory [ 1931.451571][ T8855] sctp: [Deprecated]: syz.4.18673 (pid 8855) Use of int in maxseg socket option. [ 1931.451571][ T8855] Use struct sctp_assoc_value instead [ 1931.725891][ T8867] __nla_validate_parse: 2 callbacks suppressed [ 1931.725908][ T8867] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18677'. [ 1931.796427][T24573] batadv1: left allmulticast mode [ 1931.801504][T24573] batadv1: left promiscuous mode [ 1931.806638][T24573] bridge0: port 3(batadv1) entered disabled state [ 1931.839815][T24573] bridge_slave_1: left allmulticast mode [ 1931.845765][T24573] bridge_slave_1: left promiscuous mode [ 1931.847052][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18678'. [ 1931.851522][T24573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1931.877053][ T8873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18678'. [ 1931.901588][T24573] bridge_slave_0: left allmulticast mode [ 1931.907289][T24573] bridge_slave_0: left promiscuous mode [ 1931.913025][T24573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1931.976421][T24573] dvmrp1: left allmulticast mode [ 1932.052604][T12899] Bluetooth: hci5: command tx timeout [ 1932.205765][T24573] bond13 (unregistering): (slave ip6gre1): Releasing backup interface [ 1932.216150][T24573] ip6gre1 (unregistering): left promiscuous mode [ 1932.490522][T24573] bond19 (unregistering): (slave geneve3): Releasing active interface [ 1932.513547][T24573] geneve3 (unregistering): left allmulticast mode [ 1932.600063][T24573] bond4 (unregistering): (slave bridge1): Releasing active interface [ 1932.622058][T24573] bond5 (unregistering): (slave bridge2): Releasing active interface [ 1932.649861][T24573] bond6 (unregistering): (slave bridge3): Releasing active interface [ 1932.711929][T24573] bond11 (unregistering): (slave bridge7): Releasing active interface [ 1932.737514][T24573] bond15 (unregistering): (slave bridge8): Releasing active interface [ 1932.766832][T24573] bond20 (unregistering): (slave bridge10): Releasing active interface [ 1932.789933][T24573] bond0 (unregistering): left promiscuous mode [ 1932.798670][T24573] bond_slave_0: left promiscuous mode [ 1932.820174][T24573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1932.843975][T24573] bond0 (unregistering): Released all slaves [ 1932.859056][T24573] bond1 (unregistering): Released all slaves [ 1932.879044][T24573] bond2 (unregistering): Released all slaves [ 1932.908201][T24573] bond3 (unregistering): Released all slaves [ 1932.928606][T24573] bond4 (unregistering): Released all slaves [ 1932.950092][T24573] bond5 (unregistering): Released all slaves [ 1932.969747][T24573] bond6 (unregistering): Released all slaves [ 1933.006855][T24573] bond7 (unregistering): Released all slaves [ 1933.026696][T24573] bond8 (unregistering): Released all slaves [ 1933.052362][T24573] bond9 (unregistering): Released all slaves [ 1933.079917][T24573] bond10 (unregistering): Released all slaves [ 1933.100995][T24573] bond11 (unregistering): Released all slaves [ 1933.129724][T24573] bond12 (unregistering): Released all slaves [ 1933.150307][T24573] bond13 (unregistering): Released all slaves [ 1933.180364][T24573] bond14 (unregistering): Released all slaves [ 1933.201607][T24573] bond15 (unregistering): Released all slaves [ 1933.232834][T24573] bond16 (unregistering): (slave lo): Releasing backup interface [ 1933.242898][T24573] bond16 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1933.260341][T24573] bond16 (unregistering): Released all slaves [ 1933.282409][T24573] bond17 (unregistering): Released all slaves [ 1933.301922][T24573] bond18 (unregistering): Released all slaves [ 1933.340909][T24573] bond19 (unregistering): Released all slaves [ 1933.360398][T24573] bond20 (unregistering): Released all slaves [ 1933.412118][ T8878] syzkaller0: entered promiscuous mode [ 1933.420805][ T8878] syzkaller0: entered allmulticast mode [ 1933.446256][ T8873] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1933.492554][ T8886] team0: Device xfrm0 is of different type [ 1933.537343][ T8893] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18682'. [ 1933.921250][ T6467] lo speed is unknown, defaulting to 1000 [ 1933.928033][T14963] lo speed is unknown, defaulting to 1000 [ 1933.949311][T14963] sy2: Port: 1 Link DOWN [ 1934.092072][ T8905] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 [ 1934.107589][T12899] Bluetooth: hci5: command tx timeout [ 1934.115293][T24573] tipc: Left network mode [ 1934.361094][ T8913] netlink: 'syz.2.18686': attribute type 58 has an invalid length. [ 1934.390308][ T8913] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18686'. [ 1934.627227][ T8926] team0: entered promiscuous mode [ 1934.632386][ T8926] team_slave_0: entered promiscuous mode [ 1934.663309][ T8926] team_slave_1: entered promiscuous mode [ 1934.756895][ T5285] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1934.920129][ T8937] wlan1 speed is unknown, defaulting to 1000 [ 1935.001397][ T8937] wlan1 speed is unknown, defaulting to 1000 [ 1935.022581][ T8937] wlan1 speed is unknown, defaulting to 1000 [ 1935.034467][ T8937] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1935.094020][ T8937] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1935.112920][ T8937] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1935.133604][ T8937] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1935.195728][ T8937] wlan1 speed is unknown, defaulting to 1000 [ 1935.237465][ T8937] wlan1 speed is unknown, defaulting to 1000 [ 1935.245262][ T8937] wlan1 speed is unknown, defaulting to 1000 [ 1935.252991][ T8937] wlan1 speed is unknown, defaulting to 1000 [ 1935.260777][ T8937] wlan1 speed is unknown, defaulting to 1000 [ 1935.349024][ T8937] wlan1 speed is unknown, defaulting to 1000 [ 1935.361866][ T8937] wlan1 speed is unknown, defaulting to 1000 [ 1935.369704][ T8937] wlan1 speed is unknown, defaulting to 1000 [ 1935.448940][ T8937] wlan1 speed is unknown, defaulting to 1000 [ 1935.587948][ T8937] wlan1 speed is unknown, defaulting to 1000 [ 1935.588256][ T8970] syzkaller0: entered promiscuous mode [ 1935.623852][ T8970] syzkaller0: entered allmulticast mode [ 1935.643385][ T8937] wlan1 speed is unknown, defaulting to 1000 [ 1935.656646][ T8937] wlan1 speed is unknown, defaulting to 1000 [ 1935.668037][ T8937] wlan1 speed is unknown, defaulting to 1000 [ 1935.676029][ T8937] wlan1 speed is unknown, defaulting to 1000 [ 1935.860203][ T8981] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1935.975394][ T5285] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1936.024730][ T8989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18706'. [ 1936.186940][T12899] Bluetooth: hci5: command tx timeout [ 1936.519955][ T9019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18710'. [ 1936.541418][ T9019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18710'. [ 1936.995235][ T9038] netlink: 'syz.4.18717': attribute type 1 has an invalid length. [ 1937.069602][ T9038] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1937.081954][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18717'. [ 1937.163480][ T9041] syzkaller0: entered promiscuous mode [ 1937.183299][ T9041] syzkaller0: entered allmulticast mode [ 1937.228280][ T9050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18719'. [ 1937.237446][ T9038] bond9: (slave bridge4): making interface the new active one [ 1937.245019][ T9038] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 1937.371195][ T9055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18720'. [ 1937.577718][ T9066] netlink: 'syz.3.18721': attribute type 11 has an invalid length. [ 1937.787728][ T8705] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1937.853074][ T8705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1937.896673][ T8705] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1937.973958][ T8705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1938.010843][ T8705] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1938.069989][ T8705] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1938.102749][ T8705] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1938.141920][ T8705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1938.275276][ T9101] netlink: 'syz.2.18729': attribute type 1 has an invalid length. [ 1938.361315][ T9101] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1938.425019][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18729'. [ 1938.427552][ T8705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1938.544031][ T9101] bond19: (slave bridge15): making interface the new active one [ 1938.552561][ T9101] bond19: (slave bridge15): Enslaving as an active interface with an up link [ 1938.591780][ T8705] 8021q: adding VLAN 0 to HW filter on device team0 [ 1938.673491][T24572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1938.680639][T24572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1938.836710][T24572] bridge0: port 2(bridge_slave_1) entered blocking state [ 1938.843862][T24572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1939.360442][ T9132] mac80211_hwsim hwsim208 syzkaller0: entered promiscuous mode [ 1939.394763][ T9132] mac80211_hwsim hwsim208 syzkaller0: entered allmulticast mode [ 1939.513895][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18737'. [ 1939.621886][ T9154] netlink: 'syz.4.18740': attribute type 1 has an invalid length. [ 1939.625710][ T9146] bond4: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1939.641370][ T9146] bond4 (unregistering): Released all slaves [ 1939.686275][ T9141] netlink: 576 bytes leftover after parsing attributes in process `syz.3.18737'. [ 1939.743951][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18740'. [ 1939.777931][ T9154] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1939.817890][ T9158] bond10: (slave bridge6): making interface the new active one [ 1939.827669][ T9158] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 1940.155308][ T9168] openvswitch: netlink: IP tunnel dst address not specified [ 1940.348083][ T8705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1940.489663][ T8705] veth0_vlan: entered promiscuous mode [ 1940.501542][ T8705] veth1_vlan: entered promiscuous mode [ 1940.564094][ T8705] veth0_macvtap: entered promiscuous mode [ 1940.574499][ T8705] veth1_macvtap: entered promiscuous mode [ 1940.776003][ T8705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1940.794096][ T9206] netlink: 'syz.4.18755': attribute type 1 has an invalid length. [ 1940.795120][ T8705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1940.965415][ T9206] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1940.977527][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18755'. [ 1941.030861][ T9206] bond11: (slave bridge7): making interface the new active one [ 1941.049935][ T9206] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 1941.061267][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1941.076894][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1941.090274][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1941.111328][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1941.330224][ T9221] syzkaller0: entered promiscuous mode [ 1941.335734][ T9221] syzkaller0: entered allmulticast mode [ 1941.583224][T24572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1941.591070][T24572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1941.669258][T24579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1941.672863][ T9240] xt_hashlimit: size too large, truncated to 1048576 [ 1941.694047][T24579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1941.851098][ T9247] netlink: 'syz.3.18768': attribute type 1 has an invalid length. [ 1941.876318][ T9248] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1941.930584][ T9254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18768'. [ 1941.971797][ T9247] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1942.023943][ T9254] bond4: (slave bridge5): making interface the new active one [ 1942.049681][ T9254] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 1942.304490][ T6444] IPVS: starting estimator thread 0... [ 1942.322413][ T9261] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1942.581160][ T9260] IPVS: using max 33 ests per chain, 79200 per kthread [ 1942.637922][ T5630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1942.651456][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1942.659758][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1942.668175][ T5630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1942.669818][ T9272] netlink: 'syz.3.18776': attribute type 15 has an invalid length. [ 1942.694388][ T5630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1942.767548][ T9272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18776'. [ 1942.865717][ T9272] netlink: 'syz.3.18776': attribute type 15 has an invalid length. [ 1942.878995][ T9287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18779'. [ 1942.891581][ T9272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18776'. [ 1942.898469][ T13] netdevsim netdevsim3 : set [0, 1] type 1 family 0 port 2816 - 0 [ 1942.932684][T24574] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 1942.955046][T24574] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 1942.974794][T24574] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 1943.147872][ T9296] netlink: 56 bytes leftover after parsing attributes in process `syz.3.18782'. [ 1943.196508][ T9301] netlink: 'syz.0.18785': attribute type 1 has an invalid length. [ 1943.204426][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18785'. [ 1943.315879][ T9306] netlink: 'syz.3.18787': attribute type 1 has an invalid length. [ 1943.353215][ T9306] bond5: entered promiscuous mode [ 1943.370118][ T9306] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1943.379556][ T9303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18786'. [ 1943.394370][ T9306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18787'. [ 1943.411984][ T9306] bond5: entered allmulticast mode [ 1943.467674][ T9306] bond5: (slave bridge6): making interface the new active one [ 1943.476591][ T9306] bridge6: entered promiscuous mode [ 1943.482203][ T9306] bridge6: entered allmulticast mode [ 1943.491429][ T9306] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 1943.561039][ T9316] tipc: Started in network mode [ 1943.586537][ T9316] tipc: Node identity , cluster identity 4711 [ 1943.592756][ T9316] tipc: Failed to set node id, please configure manually [ 1943.604622][ T9316] tipc: Enabling of bearer rejected, failed to enable media [ 1943.851851][ T9331] netlink: 'syz.1.18794': attribute type 1 has an invalid length. [ 1943.855167][ T9325] openvswitch: netlink: Message has 4 unknown bytes. [ 1943.876685][ T9331] 8021q: VLANs not supported on vxcan0 [ 1943.901752][ T9325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1943.923708][T24579] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1944.023506][T24573] hsr_slave_0: left promiscuous mode [ 1944.055910][T24573] hsr_slave_1: left promiscuous mode [ 1944.065766][T24573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1944.077282][T24573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1944.094274][T24573] veth1_to_team: left promiscuous mode [ 1944.100644][T24573] veth1_vlan: left promiscuous mode [ 1944.105929][T24573] veth0_vlan: left promiscuous mode [ 1944.272973][ T9354] netlink: 'syz.3.18800': attribute type 1 has an invalid length. [ 1944.440639][T24573] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 1944.462494][ T9367] netlink: 36 bytes leftover after parsing attributes in process `syz.4.18802'. [ 1944.637252][T24573] team0 (unregistering): Port device team_slave_1 removed [ 1944.654199][T24573] team0 (unregistering): Port device veth1_to_bond removed [ 1944.744986][ T5630] Bluetooth: hci3: command tx timeout [ 1944.802227][ T13] smbdirect: ib_dev[sy2] removed [ 1944.842532][ T9354] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1944.932463][ T9370] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1944.941690][ T9370] netdevsim netdevsim3 netdevsim3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1944.950569][ T9370] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1945.207660][ T9278] lo speed is unknown, defaulting to 1000 [ 1945.214265][ T9278] wlan1 speed is unknown, defaulting to 1000 [ 1945.485674][ T9278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1945.493345][ T9278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1945.501112][ T9278] bridge_slave_0: entered allmulticast mode [ 1945.510195][ T9278] bridge_slave_0: entered promiscuous mode [ 1945.519314][ T9278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1945.527020][ T9278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1945.534278][ T9278] bridge_slave_1: entered allmulticast mode [ 1945.542315][ T9278] bridge_slave_1: entered promiscuous mode [ 1945.584159][ T9278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1945.606542][ T9278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1945.652640][ T9278] team0: Port device team_slave_0 added [ 1945.662617][ T9278] team0: Port device team_slave_1 added [ 1945.735076][ T9278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1945.742043][ T9278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1945.783277][ T9278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1945.802831][ T9278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1945.812158][ T9278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1945.843048][ T9278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1945.906894][T24573] IPVS: stop unused estimator thread 0... [ 1945.922663][ T9278] hsr_slave_0: entered promiscuous mode [ 1945.932615][ T9278] hsr_slave_1: entered promiscuous mode [ 1945.939737][ T9278] debugfs: 'hsr0' already exists in 'hsr' [ 1945.946481][ T9278] Cannot create hsr debugfs directory [ 1946.192737][ T9278] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1946.204292][ T9278] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1946.323426][ T9278] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1946.340761][ T9278] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1946.446683][ T9278] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1946.458923][ T9278] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1946.604444][ T9278] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1946.614744][ T9278] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1946.753032][ T9325] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1946.867538][ T5630] Bluetooth: hci3: command tx timeout [ 1947.039945][ T9407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18810'. [ 1947.154800][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18813'. [ 1947.452034][ T9278] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1947.460350][ T9431] FAULT_INJECTION: forcing a failure. [ 1947.460350][ T9431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1947.487318][ T9431] CPU: 1 UID: 0 PID: 9431 Comm: syz.4.18819 Not tainted syzkaller #0 PREEMPT(full) [ 1947.487362][ T9431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1947.487374][ T9431] Call Trace: [ 1947.487382][ T9431] [ 1947.487391][ T9431] dump_stack_lvl+0xe8/0x150 [ 1947.487427][ T9431] should_fail_ex+0x40c/0x560 [ 1947.487454][ T9431] _copy_from_user+0x2d/0xb0 [ 1947.487483][ T9431] ___sys_sendmsg+0x1c6/0x360 [ 1947.487513][ T9431] ? __lock_acquire+0x683/0x2cf0 [ 1947.487543][ T9431] ? __pfx____sys_sendmsg+0x10/0x10 [ 1947.487575][ T9431] ? kstrtouint+0x6e/0xe0 [ 1947.487619][ T9431] ? __fget_files+0x2a/0x420 [ 1947.487640][ T9431] ? __fget_files+0x3a2/0x420 [ 1947.487663][ T9431] __sys_sendmmsg+0x273/0x4d0 [ 1947.487696][ T9431] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1947.487722][ T9431] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1947.487753][ T9431] ? ksys_write+0x242/0x270 [ 1947.487779][ T9431] ? __pfx_ksys_write+0x10/0x10 [ 1947.487812][ T9431] __x64_sys_sendmmsg+0xa0/0xc0 [ 1947.487840][ T9431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1947.487861][ T9431] do_syscall_64+0x174/0x580 [ 1947.487909][ T9431] ? trace_irq_disable+0x3b/0x140 [ 1947.487963][ T9431] ? clear_bhb_loop+0x40/0x90 [ 1947.487987][ T9431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1947.488006][ T9431] RIP: 0033:0x7fe77239de59 [ 1947.488023][ T9431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1947.488038][ T9431] RSP: 002b:00007fe773205028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1947.488056][ T9431] RAX: ffffffffffffffda RBX: 00007fe772625fa0 RCX: 00007fe77239de59 [ 1947.488068][ T9431] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1947.488079][ T9431] RBP: 00007fe773205090 R08: 0000000000000000 R09: 0000000000000000 [ 1947.488089][ T9431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1947.488098][ T9431] R13: 00007fe772626038 R14: 00007fe772625fa0 R15: 00007fff68509cb8 [ 1947.488121][ T9431] [ 1947.496956][ T9278] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1947.874446][ T9278] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1947.908964][ T9278] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1947.943121][ T9278] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1947.988562][ T9278] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1948.022762][ T9278] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1948.052076][ T9278] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1948.166151][ T9454] syzkaller0: entered promiscuous mode [ 1948.190859][ T9454] syzkaller0: entered allmulticast mode [ 1948.203954][ T5285] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1948.380082][ T9470] x_tables: duplicate underflow at hook 1 [ 1948.387228][ T9278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1948.417693][ T9278] 8021q: adding VLAN 0 to HW filter on device team0 [ 1948.442915][ T5712] bridge0: port 1(bridge_slave_0) entered blocking state [ 1948.450058][ T5712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1948.465297][T24573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1948.472437][T24573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1948.579170][ T9477] __nla_validate_parse: 1 callbacks suppressed [ 1948.579190][ T9477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18831'. [ 1948.661164][ T9481] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18831'. [ 1948.692529][ T9477] team1: entered promiscuous mode [ 1948.701100][ T9477] team1: entered allmulticast mode [ 1948.766653][ T9477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1948.905431][ T5630] Bluetooth: hci3: command tx timeout [ 1948.991033][ T9496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18835'. [ 1949.041286][ T9495] netlink: 'syz.3.18837': attribute type 39 has an invalid length. [ 1949.161824][ T9504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18839'. [ 1950.984612][ T5630] Bluetooth: hci3: command tx timeout [ 1952.567740][ T9278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1952.684497][ T9278] veth0_vlan: entered promiscuous mode [ 1952.698546][ T9278] veth1_vlan: entered promiscuous mode [ 1952.777783][ T9278] veth0_macvtap: entered promiscuous mode [ 1952.795619][ T9278] veth1_macvtap: entered promiscuous mode [ 1952.848639][ T9278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1952.868457][ T9278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1952.899589][ T9541] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2) [ 1952.913387][ T9541] bond1 (unregistering): Released all slaves [ 1952.959276][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1952.991732][T24572] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1953.016207][T24572] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1953.038429][T24572] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1953.239659][T24572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1953.260645][T24572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1953.301106][ T9560] netlink: 'syz.1.18855': attribute type 4 has an invalid length. [ 1953.320817][T24573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1953.331430][ T9561] netlink: 'syz.0.18856': attribute type 11 has an invalid length. [ 1953.332222][ T9557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18853'. [ 1953.339341][ T9561] netlink: 64 bytes leftover after parsing attributes in process `syz.0.18856'. [ 1953.381369][T24573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1953.713077][ T9578] macvtap1: entered promiscuous mode [ 1953.724198][ T9578] macvtap1: entered allmulticast mode [ 1953.730559][ T9578] veth1_vlan: entered allmulticast mode [ 1954.315261][ T9604] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18866'. [ 1954.360197][ T9593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18867'. [ 1954.388136][ T9598] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18866'. [ 1954.626851][ T9616] syzkaller0: entered promiscuous mode [ 1954.632321][ T9616] syzkaller0: entered allmulticast mode [ 1954.933694][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18874'. [ 1955.054142][ T9627] dvmrp0: entered allmulticast mode [ 1955.484440][ T9648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18879'. [ 1955.559723][ T9653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18880'. [ 1955.584487][ T9653] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18880'. [ 1955.882061][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18884'. [ 1955.928150][ T9663] bridge0: port 2(bridge_slave_1) entered disabled state [ 1955.938792][ T9663] bridge0: port 1(bridge_slave_0) entered disabled state [ 1956.116993][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18887'. [ 1956.145083][ T9670] netlink: 176 bytes leftover after parsing attributes in process `syz.1.18887'. [ 1956.363732][T12899] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1956.390637][T12899] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1956.408075][T12899] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1956.419782][T12899] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1956.437653][T12899] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1956.572764][ T9679] ip6gre1: entered promiscuous mode [ 1956.600835][ T9679] ip6gre1: entered allmulticast mode [ 1956.696119][ T9689] FAULT_INJECTION: forcing a failure. [ 1956.696119][ T9689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1956.712409][ T9689] CPU: 1 UID: 0 PID: 9689 Comm: syz.2.18891 Not tainted syzkaller #0 PREEMPT(full) [ 1956.712433][ T9689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1956.712441][ T9689] Call Trace: [ 1956.712448][ T9689] [ 1956.712454][ T9689] dump_stack_lvl+0xe8/0x150 [ 1956.712483][ T9689] should_fail_ex+0x40c/0x560 [ 1956.712508][ T9689] _copy_from_user+0x2d/0xb0 [ 1956.712535][ T9689] ___sys_sendmsg+0x1c6/0x360 [ 1956.712561][ T9689] ? __lock_acquire+0x683/0x2cf0 [ 1956.712589][ T9689] ? __pfx____sys_sendmsg+0x10/0x10 [ 1956.712615][ T9689] ? __lock_acquire+0x683/0x2cf0 [ 1956.712688][ T9689] __sys_sendmmsg+0x273/0x4d0 [ 1956.712734][ T9689] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1956.712772][ T9689] ? __pfx_xfrm_dev_backlog+0x10/0x10 [ 1956.712895][ T9689] ? __irq_exit_rcu+0xca/0x220 [ 1956.712918][ T9689] ? lockdep_softirqs_on+0x11d/0x180 [ 1956.712953][ T9689] __x64_sys_sendmmsg+0xa0/0xc0 [ 1956.712981][ T9689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1956.713000][ T9689] do_syscall_64+0x174/0x580 [ 1956.713026][ T9689] ? clear_bhb_loop+0x40/0x90 [ 1956.713050][ T9689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1956.713070][ T9689] RIP: 0033:0x7f8993d9de59 [ 1956.713089][ T9689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1956.713106][ T9689] RSP: 002b:00007f8994c5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1956.713127][ T9689] RAX: ffffffffffffffda RBX: 00007f8994025fa0 RCX: 00007f8993d9de59 [ 1956.713141][ T9689] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1956.713154][ T9689] RBP: 00007f8994c5d090 R08: 0000000000000000 R09: 0000000000000000 [ 1956.713166][ T9689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1956.713178][ T9689] R13: 00007f8994026038 R14: 00007f8994025fa0 R15: 00007fffe5084bb8 [ 1956.713209][ T9689] [ 1956.973673][T30890] bond12: (slave syz_tun): Removing an active aggregator [ 1956.983815][T30890] bond12: (slave syz_tun): Releasing backup interface [ 1957.041631][ T9691] tipc: Enabling of bearer rejected, media not registered [ 1957.050171][ T9692] netlink: 'syz.1.18892': attribute type 1 has an invalid length. [ 1957.075236][ T9692] netlink: 'syz.1.18892': attribute type 2 has an invalid length. [ 1957.159795][ T9696] xt_hashlimit: invalid rate [ 1957.266438][ T9711] sctp: [Deprecated]: syz.3.18896 (pid 9711) Use of int in maxseg socket option. [ 1957.266438][ T9711] Use struct sctp_assoc_value instead [ 1957.393919][ T9719] veth1_macvtap: left promiscuous mode [ 1957.399432][ T9719] macsec0: entered promiscuous mode [ 1957.557160][ T9724] netlink: 'syz.1.18900': attribute type 2 has an invalid length. [ 1957.567070][ T9724] netlink: 'syz.1.18900': attribute type 2 has an invalid length. [ 1957.575838][ T9724] netlink: 'syz.1.18900': attribute type 2 has an invalid length. [ 1957.591064][ T9724] netlink: 'syz.1.18900': attribute type 2 has an invalid length. [ 1957.601726][ T9724] netlink: 'syz.1.18900': attribute type 2 has an invalid length. [ 1957.612494][ T9724] netlink: 'syz.1.18900': attribute type 2 has an invalid length. [ 1957.643682][ T9724] netlink: 'syz.1.18900': attribute type 2 has an invalid length. [ 1957.657214][ T9724] netlink: 'syz.1.18900': attribute type 2 has an invalid length. [ 1957.765338][ T9675] lo speed is unknown, defaulting to 1000 [ 1957.800834][ T9675] wlan1 speed is unknown, defaulting to 1000 [ 1957.987302][ T9738] IPVS: Unknown mcast interface: netpci0 [ 1958.002882][ T9738] pim6reg1: entered promiscuous mode [ 1958.009065][ T9738] pim6reg1: entered allmulticast mode [ 1958.195020][ T9746] vlan2: entered promiscuous mode [ 1958.200093][ T9746] hsr0: entered promiscuous mode [ 1958.206505][ T9746] vlan2: entered allmulticast mode [ 1958.211884][ T9746] hsr0: entered allmulticast mode [ 1958.217314][ T9746] hsr_slave_0: entered allmulticast mode [ 1958.241425][ T9746] hsr_slave_1: entered allmulticast mode [ 1958.394693][ T9675] bridge0: port 1(bridge_slave_0) entered blocking state [ 1958.401935][ T9675] bridge0: port 1(bridge_slave_0) entered disabled state [ 1958.409161][ T9675] bridge_slave_0: entered allmulticast mode [ 1958.417045][ T9675] bridge_slave_0: entered promiscuous mode [ 1958.426338][ T9675] bridge0: port 2(bridge_slave_1) entered blocking state [ 1958.433529][ T9675] bridge0: port 2(bridge_slave_1) entered disabled state [ 1958.440749][ T9675] bridge_slave_1: entered allmulticast mode [ 1958.468198][ T9675] bridge_slave_1: entered promiscuous mode [ 1958.498517][ T9675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1958.511151][ T9675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1958.552737][ T9675] team0: Port device team_slave_0 added [ 1958.569392][ T5630] Bluetooth: hci0: command tx timeout [ 1958.590687][ T9675] team0: Port device team_slave_1 added [ 1958.628078][ T9675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1958.635034][ T9675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1958.660906][ T9675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1958.672878][ T9675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1958.697836][ T9675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1958.723720][ T9675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1958.735104][ T9763] syzkaller0: entered promiscuous mode [ 1958.740590][ T9763] syzkaller0: entered allmulticast mode [ 1958.824819][ T9675] hsr_slave_0: entered promiscuous mode [ 1958.831611][ T9675] hsr_slave_1: entered promiscuous mode [ 1958.838003][ T9675] debugfs: 'hsr0' already exists in 'hsr' [ 1958.843739][ T9675] Cannot create hsr debugfs directory [ 1959.101011][ T9778] ip6t_srh: unknown srh match flags 5F28 [ 1959.165857][ T9675] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1959.281088][ T9783] xt_socket: unknown flags 0xe4 [ 1959.348933][ T9675] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1959.401561][ T9787] __nla_validate_parse: 11 callbacks suppressed [ 1959.401594][ T9787] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18922'. [ 1959.573178][ T9793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18925'. [ 1959.579989][ T9675] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1959.793573][ T9675] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1959.831856][ T9802] veth0_to_bridge: entered promiscuous mode [ 1959.851289][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18928'. [ 1959.927364][T24572] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1959.936453][T24572] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1959.945214][T24572] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1959.953988][ T9801] veth0_to_bridge: left promiscuous mode [ 1959.971388][T24572] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1960.086270][ T9806] netlink: 212 bytes leftover after parsing attributes in process `syz.1.18929'. [ 1960.133389][ T9806] NCSI netlink: No device for ifindex 813332851 [ 1960.224281][ T9812] netlink: 84 bytes leftover after parsing attributes in process `syz.1.18932'. [ 1960.247628][ T9810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18931'. [ 1960.277586][ T9812] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 1960.305172][ T9812] netlink: 48 bytes leftover after parsing attributes in process `syz.1.18932'. [ 1960.357866][ T9812] netlink: 72 bytes leftover after parsing attributes in process `syz.1.18932'. [ 1960.422599][ T9818] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18934'. [ 1960.447274][ T9818] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18934'. [ 1960.573522][ T9675] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1960.589114][ T5630] Bluetooth: hci0: command tx timeout [ 1960.624242][ T9675] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1960.661083][ T9675] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1960.693061][ T9675] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1960.706113][ T9675] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1960.738429][ T9675] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1960.746482][ T9675] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1960.760957][ T9675] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1960.902209][ T9825] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1960.934626][ T9825] bond12: (slave bridge9): making interface the new active one [ 1960.942869][ T9825] bond12: (slave bridge9): Enslaving as an active interface with an up link [ 1961.145356][ T9675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1961.174662][ T9675] 8021q: adding VLAN 0 to HW filter on device team0 [ 1961.210213][T24572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1961.217395][T24572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1961.249389][T24578] bridge0: port 2(bridge_slave_1) entered blocking state [ 1961.256574][T24578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1961.341772][ T9675] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1961.352145][ T9675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1961.379159][ T9858] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1961.386491][ T9858] IPv6: NLM_F_CREATE should be set when creating new route [ 1961.797031][ T9892] 8021q: VLANs not supported on ip_vti0 [ 1962.289082][ T9675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1962.310546][T24579] tipc: Subscription rejected, illegal request [ 1962.402757][ T9675] veth0_vlan: entered promiscuous mode [ 1962.415951][ T9917] validate_nla: 28 callbacks suppressed [ 1962.415968][ T9917] netlink: 'syz.4.18963': attribute type 1 has an invalid length. [ 1962.421038][ T9675] veth1_vlan: entered promiscuous mode [ 1962.626378][ T9917] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1962.648547][ T9917] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1962.662083][ T9917] veth0_to_team: entered promiscuous mode [ 1962.713719][ T5630] Bluetooth: hci0: command tx timeout [ 1962.742757][ T3142] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1962.765958][ T9923] veth0_virt_wifi: entered promiscuous mode [ 1962.860588][ T6444] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1962.903224][ T6446] wlan1 speed is unknown, defaulting to 1000 [ 1962.903317][ T9930] 0XD: renamed from gretap0 (while UP) [ 1962.923291][ T9930] 0XD: entered allmulticast mode [ 1962.939133][ T9932] bridge0: port 3(syz_tun) entered blocking state [ 1962.959044][ T9932] bridge0: port 3(syz_tun) entered disabled state [ 1962.980179][ T9932] syz_tun: entered allmulticast mode [ 1962.989260][ T9932] syz_tun: entered promiscuous mode [ 1962.995015][ T9932] bridge0: port 3(syz_tun) entered blocking state [ 1963.001512][ T9932] bridge0: port 3(syz_tun) entered forwarding state [ 1963.046505][ T9675] veth0_macvtap: entered promiscuous mode [ 1963.067202][ T9675] veth1_macvtap: entered promiscuous mode [ 1963.117755][ T9675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1963.182088][ T9675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1963.209191][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1963.230462][T24572] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1963.239792][T24572] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1963.248567][T24572] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1963.353206][ T5712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1963.368191][ T5712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1963.405239][T24578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1963.413098][T24578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1963.748910][ T9966] syzkaller0: entered promiscuous mode [ 1963.754422][ T9966] syzkaller0: entered allmulticast mode [ 1964.752089][ T5630] Bluetooth: hci0: command tx timeout [ 1966.512031][ T9965] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1967.488768][ T9995] batadv1: entered allmulticast mode [ 1967.816150][T10023] __nla_validate_parse: 9 callbacks suppressed [ 1967.816185][T10023] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18989'. [ 1967.826819][T10026] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18990'. [ 1967.876323][T10027] netlink: 'syz.1.18991': attribute type 2 has an invalid length. [ 1967.909520][T10026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1968.067620][T10033] ipvlan1: entered promiscuous mode [ 1968.099108][T10033] ipvlan1: entered allmulticast mode [ 1968.132015][T10033] veth0_vlan: entered allmulticast mode [ 1968.161030][ T6466] IPVS: starting estimator thread 0... [ 1968.179329][T10041] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.18996'. [ 1968.225570][T10041] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.18996'. [ 1968.229333][T10043] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.18996'. [ 1968.292413][T10044] bridge1: entered promiscuous mode [ 1968.298643][T10044] bridge1: entered allmulticast mode [ 1968.349901][T10042] IPVS: using max 29 ests per chain, 69600 per kthread [ 1968.652517][T10063] syzkaller0: entered promiscuous mode [ 1968.673773][T10063] syzkaller0: entered allmulticast mode [ 1968.702869][T10063] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1968.761587][T10062] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1969.341288][T10096] team0: Device xfrm0 is of different type [ 1969.701594][T10116] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19022'. [ 1969.715873][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19023'. [ 1969.959562][T10139] x_tables: duplicate underflow at hook 1 [ 1970.626423][T10168] tunl0: entered promiscuous mode [ 1970.634016][T10168] netlink: 'syz.0.19034': attribute type 3 has an invalid length. [ 1970.641847][T10168] netlink: 9 bytes leftover after parsing attributes in process `syz.0.19034'. [ 1970.652427][T10168] netlink: 'syz.0.19034': attribute type 1 has an invalid length. [ 1970.836208][T10176] netlink: 'syz.2.19037': attribute type 2 has an invalid length. [ 1970.865961][T10176] : entered promiscuous mode [ 1970.873957][T10180] netlink: 576 bytes leftover after parsing attributes in process `syz.3.19039'. [ 1971.189168][T10196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19045'. [ 1971.284474][T10199] veth0: entered promiscuous mode [ 1971.332894][T10199] veth0: left promiscuous mode [ 1971.407774][T10202] netlink: 'syz.4.19046': attribute type 1 has an invalid length. [ 1971.580744][T10202] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1971.662083][T10206] bond13: (slave bridge10): making interface the new active one [ 1971.709803][T10206] bond13: (slave bridge10): Enslaving as an active interface with an up link [ 1972.278185][T10232] syzkaller1: entered promiscuous mode [ 1972.296300][T10232] syzkaller1: entered allmulticast mode [ 1972.754614][T10247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1972.871731][T10258] netlink: 'syz.4.19061': attribute type 1 has an invalid length. [ 1972.932404][T10259] __nla_validate_parse: 12 callbacks suppressed [ 1972.932422][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19061'. [ 1973.120921][T10258] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1973.125551][T10267] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19062'. [ 1973.166579][T10259] bond14: (slave bridge11): making interface the new active one [ 1973.183297][T10259] bond14: (slave bridge11): Enslaving as an active interface with an up link [ 1973.288044][T10277] netlink: 'syz.4.19067': attribute type 7 has an invalid length. [ 1973.296333][T10277] netlink: 140 bytes leftover after parsing attributes in process `syz.4.19067'. [ 1973.327124][T10277] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19067'. [ 1973.721875][T10292] netlink: 96 bytes leftover after parsing attributes in process `syz.0.19071'. [ 1974.088714][T10297] bridge0: port 2(bridge_slave_1) entered disabled state [ 1974.098065][T10297] bridge0: port 1(bridge_slave_0) entered disabled state [ 1974.526247][T10297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1974.559000][T10297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1974.561817][T10323] netlink: 'syz.4.19077': attribute type 1 has an invalid length. [ 1974.618494][T10324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19077'. [ 1974.939804][T10315] syzkaller0: entered promiscuous mode [ 1974.946596][T10315] syzkaller0: entered allmulticast mode [ 1974.999933][T10323] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1975.031658][T10324] bond15: (slave bridge12): making interface the new active one [ 1975.041559][T10324] bond15: (slave bridge12): Enslaving as an active interface with an up link [ 1975.051506][T24578] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1975.060485][T24578] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1975.097114][T10336] netlink: 'syz.2.19079': attribute type 32 has an invalid length. [ 1975.966500][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1977.148253][ T5712] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1978.508019][T24578] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1978.521018][T24578] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1978.818494][T10358] netlink: 830 bytes leftover after parsing attributes in process `syz.2.19086'. [ 1978.866793][T10363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19084'. [ 1978.885210][ T7128] IPVS: starting estimator thread 0... [ 1978.978202][T10365] IPVS: using max 28 ests per chain, 67200 per kthread [ 1978.994205][T10348] bond0 (unregistering): (slave bond7): Releasing backup interface [ 1979.014141][T10348] bond0 (unregistering): Released all slaves [ 1979.027684][T10372] netlink: 'syz.0.19091': attribute type 1 has an invalid length. [ 1979.049247][T10372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1979.060337][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19091'. [ 1979.086338][T10374] netlink: 56 bytes leftover after parsing attributes in process `syz.1.19087'. [ 1979.113779][T10372] bond1: (slave bridge1): making interface the new active one [ 1979.122230][T10372] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1979.135446][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19087'. [ 1979.213563][T10370] sit0: entered promiscuous mode [ 1979.255258][T10370] netlink: 'syz.3.19090': attribute type 1 has an invalid length. [ 1979.278669][T10370] netlink: 1 bytes leftover after parsing attributes in process `syz.3.19090'. [ 1979.480364][T10384] syzkaller0: entered promiscuous mode [ 1979.485869][T10384] syzkaller0: entered allmulticast mode [ 1979.882546][T10394] netlink: 576 bytes leftover after parsing attributes in process `syz.0.19097'. [ 1980.264922][T10424] netlink: 'syz.1.19104': attribute type 1 has an invalid length. [ 1980.376667][T10424] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1980.404315][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19104'. [ 1980.442386][T10437] bond1: (slave bridge2): making interface the new active one [ 1980.450887][T10437] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 1980.798994][T10459] syzkaller1: entered promiscuous mode [ 1980.804498][T10459] syzkaller1: entered allmulticast mode [ 1980.940891][T10467] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19117'. [ 1980.951695][T10468] IPv6: NLM_F_CREATE should be specified when creating new route [ 1980.996323][T10472] netlink: 'syz.3.19119': attribute type 1 has an invalid length. [ 1981.037850][T10472] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1981.069278][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19119'. [ 1981.114986][T10472] bond7: (slave bridge7): making interface the new active one [ 1981.123134][T10472] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 1981.510131][T10493] bond8 (unregistering): Released all slaves [ 1983.317756][T12899] Bluetooth: hci4: command tx timeout [ 1991.225655][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2009.326768][T10516] netlink: 'syz.3.19133': attribute type 1 has an invalid length. [ 2009.361757][T10511] tc_dump_action: action bad kind [ 2009.383812][T10516] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2009.394530][T10516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19133'. [ 2009.583479][T10516] bond8: (slave bridge8): making interface the new active one [ 2009.592734][T10516] bond8: (slave bridge8): Enslaving as an active interface with an up link [ 2009.689370][T10536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19139'. [ 2009.698826][T10536] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 2009.719991][T10536] netlink: 152 bytes leftover after parsing attributes in process `syz.2.19139'. [ 2009.804383][T10539] netlink: 'syz.3.19141': attribute type 4 has an invalid length. [ 2009.858210][T10541] netlink: 'syz.3.19141': attribute type 4 has an invalid length. [ 2011.046790][T10600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19157'. [ 2011.067283][ T5712] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2011.147858][T10611] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2011.164248][T10611] netlink: 104 bytes leftover after parsing attributes in process `syz.0.19160'. [ 2011.164916][T10600] block nbd13: server does not support multiple connections per device. [ 2011.189786][T10600] block nbd13: shutting down sockets [ 2011.210015][T10603] netlink: 'syz.2.19158': attribute type 1 has an invalid length. [ 2011.219897][T10603] netlink: 220 bytes leftover after parsing attributes in process `syz.2.19158'. [ 2011.400589][T10618] netlink: 'syz.3.19162': attribute type 1 has an invalid length. [ 2011.459450][T10618] bond9: (slave gretap0): making interface the new active one [ 2011.472563][T10618] bond9: (slave gretap0): Enslaving as an active interface with an up link [ 2011.676451][ T30] audit: type=1800 audit(1783342875.033:38): pid=10631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.19166" name="memory.events" dev="tmpfs" ino=218 res=0 errno=0 [ 2011.755956][T10631] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19166'. [ 2011.822055][T10636] netlink: 'syz.3.19167': attribute type 10 has an invalid length. [ 2012.142299][T10660] netlink: 64 bytes leftover after parsing attributes in process `syz.3.19177'. [ 2012.440845][T10669] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19178'. [ 2012.761687][T10688] netlink: 'syz.3.19182': attribute type 1 has an invalid length. [ 2012.920123][T10693] bond10: (slave bridge9): making interface the new active one [ 2012.932745][T10693] bond10: (slave bridge9): Enslaving as an active interface with an up link [ 2012.953685][T10688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19182'. [ 2013.093245][T10701] netlink: 'syz.0.19186': attribute type 10 has an invalid length. [ 2013.356871][T10715] bridge0: port 1(bridge_slave_0) entered blocking state [ 2013.364882][T10715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2013.415633][T10722] tc_dump_action: action bad kind [ 2013.454811][T10724] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 2013.747944][T10746] xt_hashlimit: size too large, truncated to 1048576 [ 2014.195762][T10767] erspan0: left allmulticast mode [ 2014.707743][T10801] __nla_validate_parse: 4 callbacks suppressed [ 2014.707760][T10801] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.19220'. [ 2014.764130][T10808] netlink: 40 bytes leftover after parsing attributes in process `syz.1.19221'. [ 2014.776624][T10801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19220'. [ 2014.777580][T10808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19221'. [ 2014.822374][T10814] netlink: 88 bytes leftover after parsing attributes in process `syz.1.19221'. [ 2015.077853][T10829] bridge0: port 4(batadv1) entered blocking state [ 2015.085773][T10829] bridge0: port 4(batadv1) entered disabled state [ 2015.092363][T10829] batadv1: entered allmulticast mode [ 2015.099218][T10829] batadv1: entered promiscuous mode [ 2015.217321][T10839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19232'. [ 2015.236455][T10839] 8021q: VLANs not supported on ip_vti0 [ 2015.256748][T10844] netlink: 'syz.4.19230': attribute type 9 has an invalid length. [ 2015.574891][ T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 2015.586240][ T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 2015.779078][T10873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19242'. [ 2015.890392][T10875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19243'. [ 2016.099108][T10893] netlink: 68 bytes leftover after parsing attributes in process `syz.4.19251'. [ 2016.151714][T10903] netlink: 'syz.3.19250': attribute type 2 has an invalid length. [ 2016.376073][T10914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19255'. [ 2016.496969][T10923] team0: Port device xfrm0 added [ 2016.618351][T10930] netlink: 'syz.4.19261': attribute type 5 has an invalid length. [ 2016.634447][T10927] policy can only be matched on NF_INET_PRE_ROUTING [ 2016.634466][T10927] unable to load match [ 2016.891220][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2016.892558][T10946] Bluetooth: MGMT ver 1.23 [ 2016.908442][ T7128] IPVS: starting estimator thread 0... [ 2016.933857][T10946] IPVS: ip_vs_add_dest(): server weight less than zero [ 2017.126042][T10947] IPVS: using max 29 ests per chain, 69600 per kthread [ 2017.721976][T10981] macvtap1: entered promiscuous mode [ 2017.745107][T10981] macvtap1: entered allmulticast mode [ 2017.750948][T10981] veth1_vlan: entered allmulticast mode [ 2017.856154][T10995] netlink: 'syz.1.19280': attribute type 2 has an invalid length. [ 2017.870543][T10995] : entered promiscuous mode [ 2018.067634][T11010] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 2018.078350][T11010] gretap1: entered promiscuous mode [ 2018.083791][T11010] gretap1: entered allmulticast mode [ 2018.086194][T11014] netlink: 'syz.0.19284': attribute type 21 has an invalid length. [ 2018.203064][T11023] bridge0: port 3(macvlan0) entered blocking state [ 2018.238119][T11023] bridge0: port 3(macvlan0) entered disabled state [ 2018.251387][T11023] macvlan0: entered allmulticast mode [ 2018.257874][T11023] macvlan0: entered promiscuous mode [ 2018.314925][T11032] bridge0: port 5(batadv2) entered blocking state [ 2018.321914][T11032] bridge0: port 5(batadv2) entered disabled state [ 2018.339391][T11032] batadv2: entered allmulticast mode [ 2018.352935][T11032] batadv2: entered promiscuous mode [ 2018.484397][T11038] macvlan0: entered promiscuous mode [ 2018.814757][ T5712] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 2018.823992][ T5712] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 2018.985634][T12899] Bluetooth: hci4: command 0x0406 tx timeout [ 2020.431240][T11063] __nla_validate_parse: 8 callbacks suppressed [ 2020.431258][T11063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19301'. [ 2020.772073][T11074] veth0: entered promiscuous mode [ 2020.797172][T11073] veth0: left promiscuous mode [ 2020.933319][T11000] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2021.149463][T11083] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.19306'. [ 2021.182533][T11085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19307'. [ 2021.377828][T11099] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20000 [ 2021.390025][T11101] netlink: 'syz.2.19311': attribute type 1 has an invalid length. [ 2021.482604][T11101] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2021.499957][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19311'. [ 2021.609168][T11112] netlink: 'syz.0.19316': attribute type 2 has an invalid length. [ 2021.640201][T11108] bond1: (slave bridge1): making interface the new active one [ 2021.671347][T11108] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 2021.767161][T11116] netlink: 'syz.0.19317': attribute type 4 has an invalid length. [ 2021.797587][T11116] netlink: 152 bytes leftover after parsing attributes in process `syz.0.19317'. [ 2021.822183][T11116] .`: renamed from bond0 [ 2021.929837][T11123] sctp: [Deprecated]: syz.1.19321 (pid 11123) Use of int in maxseg socket option. [ 2021.929837][T11123] Use struct sctp_assoc_value instead [ 2021.969780][T11125] syzkaller0: entered promiscuous mode [ 2021.975280][T11125] syzkaller0: entered allmulticast mode [ 2022.174399][T11131] ipvlan1: left promiscuous mode [ 2022.200608][T11131] ipvlan1: left allmulticast mode [ 2022.232514][T11131] veth0_vlan: left allmulticast mode [ 2022.325114][T11139] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19324'. [ 2022.408533][T11130] bond2 (unregistering): Released all slaves [ 2022.477891][T11149] xt_ecn: cannot match TCP bits for non-tcp packets [ 2022.486033][T11146] can: request_module (can-proto-0) failed. [ 2022.501771][T11153] netlink: 'syz.0.19328': attribute type 1 has an invalid length. [ 2022.534317][T11153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2022.545229][T11153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19328'. [ 2022.629338][T11153] bond0: (slave bridge2): making interface the new active one [ 2022.637644][T11153] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 2022.851025][T11176] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2022.873462][T11176] pim6reg527: entered allmulticast mode [ 2022.972323][T11180] sctp: [Deprecated]: syz.4.19336 (pid 11180) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2022.972323][T11180] Use struct sctp_sack_info instead [ 2023.022153][T11184] sctp: [Deprecated]: syz.1.19337 (pid 11184) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2023.022153][T11184] Use struct sctp_sack_info instead [ 2023.049532][T11184] No such timeout policy "syz0" [ 2023.111911][T11192] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19339'. [ 2023.199170][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19340'. [ 2023.216263][T11195] gtp1: entered promiscuous mode [ 2023.221238][T11195] gtp1: entered allmulticast mode [ 2023.256830][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19340'. [ 2023.320514][T11200] netlink: 'syz.2.19342': attribute type 1 has an invalid length. [ 2023.384378][T11200] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2023.426727][T11200] bond2: (slave bridge2): making interface the new active one [ 2023.434936][T11200] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 2023.772360][T11233] syzkaller0: entered promiscuous mode [ 2023.778291][T11233] syzkaller0: entered allmulticast mode [ 2024.205596][T11206] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2024.313702][T11250] netlink: 'syz.3.19358': attribute type 1 has an invalid length. [ 2024.357940][T11250] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2024.386102][T11250] bond11: (slave bridge10): making interface the new active one [ 2024.400418][T11250] bond11: (slave bridge10): Enslaving as an active interface with an up link [ 2024.626076][T11260] bond12 (unregistering): Released all slaves [ 2024.659870][T11272] netlink: 'syz.0.19365': attribute type 1 has an invalid length. [ 2024.708235][T11265] bond12 (unregistering): Released all slaves [ 2024.732288][T11278] netlink: 'syz.4.19367': attribute type 3 has an invalid length. [ 2024.746399][T11278] netlink: 'syz.4.19367': attribute type 1 has an invalid length. [ 2024.826482][T11274] bond2: (slave bridge3): making interface the new active one [ 2024.846054][T11274] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 2025.094961][ T5712] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2025.112557][ T5712] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2025.136346][T24573] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2025.172000][T24573] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2025.411119][T11312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2025.773508][T11325] __nla_validate_parse: 11 callbacks suppressed [ 2025.773558][T11325] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19381'. [ 2025.853812][T11330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19384'. [ 2025.880218][T11330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19384'. [ 2026.041261][ T30] audit: type=1107 audit(1783342889.393:39): pid=11331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 2026.144000][T11336] siw: device registration error -23 [ 2026.269657][T11341] netlink: 3 bytes leftover after parsing attributes in process `syz.0.19388'. [ 2026.311772][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19390'. [ 2026.652337][T11354] netlink: 104 bytes leftover after parsing attributes in process `syz.4.19393'. [ 2026.918166][T11369] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2026.956238][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19396'. [ 2027.016511][T11374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19396'. [ 2027.227661][T11386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19401'. [ 2027.246635][T11388] netlink: 'syz.0.19396': attribute type 10 has an invalid length. [ 2027.350296][T11393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19403'. [ 2028.238548][T11417] netlink: 'syz.0.19407': attribute type 11 has an invalid length. [ 2028.398335][T11424] netlink: 'syz.3.19410': attribute type 2 has an invalid length. [ 2028.427065][T11424] netlink: 'syz.3.19410': attribute type 2 has an invalid length. [ 2029.052824][T11446] netlink: 'syz.4.19419': attribute type 21 has an invalid length. [ 2029.330126][T11446] bond0: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 2029.350261][T11446] bond0 (unregistering): Released all slaves [ 2029.526392][T11464] netlink: 'syz.1.19422': attribute type 3 has an invalid length. [ 2029.718843][T11471] netlink: 'syz.2.19425': attribute type 1 has an invalid length. [ 2029.872184][T11480] netlink: 'syz.3.19429': attribute type 23 has an invalid length. [ 2030.601430][T11512] bond12: option min_links: invalid value (18446744073709551614) [ 2030.613319][T11512] bond12: option min_links: allowed values 0 - 2147483647 [ 2030.651467][T11512] bond12 (unregistering): Released all slaves [ 2031.190590][T11545] __nla_validate_parse: 10 callbacks suppressed [ 2031.190635][T11545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19446'. [ 2031.250691][T11551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2031.261747][T11548] netlink: 'syz.4.19447': attribute type 1 has an invalid length. [ 2031.291826][T11555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19449'. [ 2031.316379][T11555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19449'. [ 2031.376471][T11558] syzkaller0: entered promiscuous mode [ 2031.382183][T11558] syzkaller0: entered allmulticast mode [ 2031.497783][T11548] ip6gretap1: entered promiscuous mode [ 2031.504344][T11548] ip6gretap1: entered allmulticast mode [ 2031.526543][T11548] bond0: (slave ip6gretap1): making interface the new active one [ 2031.537817][T11548] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2031.562940][T11548] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2031.581500][T11548] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 2031.629022][T11566] tipc: Enabling of bearer rejected, already enabled [ 2031.662526][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19454'. [ 2031.672940][T11569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19454'. [ 2031.979617][T11588] netlink: 'syz.1.19458': attribute type 1 has an invalid length. [ 2032.004737][T11588] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2032.037400][T11588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19458'. [ 2032.059111][T11588] bond2: (slave bridge3): making interface the new active one [ 2032.062347][T24579] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 2032.076924][T11588] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 2032.213461][T11598] netlink: 'syz.4.19461': attribute type 12 has an invalid length. [ 2034.970029][T11586] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2035.186779][T11637] netlink: 'syz.2.19469': attribute type 1 has an invalid length. [ 2035.247158][T11649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19469'. [ 2035.394716][T11637] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2035.612438][T11674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2035.663914][T11674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2035.678148][T11674] bond0 (unregistering): Released all slaves [ 2035.702922][T11682] tipc: Started in network mode [ 2035.721091][T11682] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 2035.730908][T11682] tipc: Enabling of bearer rejected, failed to enable media [ 2035.762778][T11690] tipc: Enabling of bearer rejected, failed to enable media [ 2035.973386][T11699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2036.419201][ T5285] veth0_vlan: left promiscuous mode [ 2036.441377][ T6446] veth0_vlan: entered promiscuous mode [ 2036.469096][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033b6e000: rx timeout, send abort [ 2036.702715][T11732] netlink: 'syz.1.19488': attribute type 1 has an invalid length. [ 2036.825915][T11745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19488'. [ 2036.875552][T11732] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2036.956865][T11745] bond3: (slave bridge4): making interface the new active one [ 2036.965208][T11745] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 2036.966245][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805306c400: rx timeout, send abort [ 2036.983523][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033b6e000: abort rx timeout. Force session deactivation [ 2037.009894][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805306c400: connection exists (fe ff). last cmd: 20 [ 2037.259863][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806715dc00: rx timeout, send abort [ 2037.359625][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 2037.732426][T11771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19496'. [ 2037.768167][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806715dc00: abort rx timeout. Force session deactivation [ 2038.066287][T11790] syzkaller0: entered promiscuous mode [ 2038.072106][T11796] netlink: 40 bytes leftover after parsing attributes in process `syz.4.19502'. [ 2038.081488][T11790] syzkaller0: entered allmulticast mode [ 2038.100611][T11801] netlink: 'syz.2.19503': attribute type 1 has an invalid length. [ 2038.200743][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19503'. [ 2038.269114][T11801] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2038.296691][T11807] bond5: (slave bridge3): making interface the new active one [ 2038.305039][T11807] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 2038.483286][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19509'. [ 2038.616320][T11830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19510'. [ 2038.625671][T11830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19510'. [ 2038.729251][T11838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19512'. [ 2038.738659][T11840] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19512'. [ 2038.817063][T11844] netlink: 'syz.2.19515': attribute type 1 has an invalid length. [ 2038.821500][T11846] netlink: 'syz.0.19514': attribute type 12 has an invalid length. [ 2038.855976][T11844] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 2038.879975][T11844] veth3: entered promiscuous mode [ 2038.888611][T11844] bond6: (slave veth3): Enslaving as a backup interface with a down link [ 2038.923251][T11844] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19515'. [ 2038.941673][T24574] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2038.942898][T11844] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2039.086185][T24572] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2039.152903][T11860] netlink: 'syz.3.19518': attribute type 1 has an invalid length. [ 2039.198643][T11860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2039.247206][T11860] bond0: (slave bridge11): making interface the new active one [ 2039.255637][T11860] bond0: (slave bridge11): Enslaving as an active interface with an up link [ 2039.867566][T11898] pim6reg: entered allmulticast mode [ 2039.881263][T11899] pim6reg: left allmulticast mode [ 2040.203016][T11925] netlink: 'syz.2.19535': attribute type 1 has an invalid length. [ 2040.438804][T11925] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2040.523989][T11937] bond7: (slave bridge4): making interface the new active one [ 2040.552406][T11937] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 2040.856852][T11957] netlink: 'syz.3.19545': attribute type 12 has an invalid length. [ 2040.905687][T11957] netlink: 'syz.3.19545': attribute type 12 has an invalid length. [ 2041.106645][T11969] bridge12: entered allmulticast mode [ 2041.239244][T11982] netlink: 'syz.1.19554': attribute type 28 has an invalid length. [ 2041.249442][T11984] netlink: 'syz.3.19553': attribute type 1 has an invalid length. [ 2041.256527][T11982] netlink: 'syz.1.19554': attribute type 3 has an invalid length. [ 2041.387174][T11991] Cannot find del_set index 7 as target [ 2041.437135][T11990] team0 (unregistering): Port device team_slave_0 removed [ 2041.458864][T11990] team0 (unregistering): Port device team_slave_1 removed [ 2041.912367][T12029] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2041.914922][T12024] can: request_module (can-proto-4) failed. [ 2042.147398][T12040] __nla_validate_parse: 15 callbacks suppressed [ 2042.147418][T12040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19573'. [ 2042.162716][T12040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19573'. [ 2042.209188][T12040] netlink: 'syz.4.19573': attribute type 9 has an invalid length. [ 2042.923928][T12068] netlink: 80 bytes leftover after parsing attributes in process `syz.3.19581'. [ 2043.287187][T12089] xt_ipcomp: unknown flags 1D [ 2043.488349][T12103] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19591'. [ 2044.069186][T12122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19598'. [ 2044.397912][T12140] netlink: 100 bytes leftover after parsing attributes in process `syz.4.19602'. [ 2044.549974][T12144] netlink: 'syz.0.19603': attribute type 1 has an invalid length. [ 2044.639536][T12144] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2044.680376][T12144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19603'. [ 2044.692496][T12132] netlink: 'syz.2.19601': attribute type 4 has an invalid length. [ 2044.818359][T12144] bond3: (slave bridge5): making interface the new active one [ 2044.916120][T12144] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 2045.088504][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19608'. [ 2045.506870][T12179] netlink: 40 bytes leftover after parsing attributes in process `syz.1.19612'. [ 2045.599317][T12184] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2045.605808][T12184] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2045.642339][T12179] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.19612'. [ 2045.756182][T12187] syzkaller0: entered promiscuous mode [ 2045.771545][T12187] syzkaller0: entered allmulticast mode [ 2045.848583][T12200] netlink: 'syz.2.19618': attribute type 1 has an invalid length. [ 2045.909410][T12200] bond8: entered promiscuous mode [ 2045.915185][T12200] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2045.980350][T12200] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2045.987568][T12200] bond8: (slave vti0): The slave device specified does not support setting the MAC address [ 2045.989799][T12214] netlink: 'syz.4.19621': attribute type 1 has an invalid length. [ 2045.997561][T12200] bond8: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 2046.005612][T12200] bond8: (slave vti0): making interface the new active one [ 2046.005634][T12200] vti0: entered promiscuous mode [ 2046.098752][T12200] vti0: left promiscuous mode [ 2046.263696][T12214] 8021q: adding VLAN 0 to HW filter on device bond16 [ 2046.271712][T12198] syzkaller1: entered promiscuous mode [ 2046.277315][T12198] syzkaller1: entered allmulticast mode [ 2046.317406][T12227] bond16: (slave bridge13): making interface the new active one [ 2046.332182][T12227] bond16: (slave bridge13): Enslaving as an active interface with an up link [ 2046.815524][T12237] 8021q: adding VLAN 0 to HW filter on device bond12 [ 2047.301098][T12271] netlink: 'syz.4.19634': attribute type 1 has an invalid length. [ 2047.382316][T12273] __nla_validate_parse: 8 callbacks suppressed [ 2047.382335][T12273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19634'. [ 2047.461633][T12271] 8021q: adding VLAN 0 to HW filter on device bond17 [ 2047.502872][T12273] bond17: (slave bridge14): making interface the new active one [ 2047.511827][T12273] bond17: (slave bridge14): Enslaving as an active interface with an up link [ 2047.534284][T12277] xt_hashlimit: max too large, truncated to 1048576 [ 2047.584222][T12277] No such timeout policy "syz1" [ 2047.596589][T12282] netlink: 'syz.4.19641': attribute type 4 has an invalid length. [ 2047.914964][T12314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19649'. [ 2047.939734][T12315] netlink: 'syz.3.19649': attribute type 10 has an invalid length. [ 2047.954182][T12310] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19648'. [ 2047.974955][T12310] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19648'. [ 2048.087758][T12326] netlink: 'syz.2.19652': attribute type 1 has an invalid length. [ 2048.093598][T12310] gretap1: entered promiscuous mode [ 2048.102807][T12310] gretap1: entered allmulticast mode [ 2048.149907][T12327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19652'. [ 2048.175094][T12326] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2048.197845][T12327] bond9: (slave bridge5): making interface the new active one [ 2048.210505][T12327] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 2048.501502][T12347] sit2: entered allmulticast mode [ 2048.508975][T12351] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19658'. [ 2048.918593][T12380] netlink: 'syz.3.19663': attribute type 1 has an invalid length. [ 2048.986775][T12380] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 2049.023292][T12384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19664'. [ 2049.181956][T12401] x_tables: duplicate underflow at hook 2 [ 2049.279649][T12412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19667'. [ 2049.362683][T12412] netlink: 'syz.2.19667': attribute type 1 has an invalid length. [ 2049.781102][T12411] netlink: 'syz.4.19668': attribute type 4 has an invalid length. [ 2051.929316][T12384] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2054.757185][ T5630] Bluetooth: hci5: command 0x0406 tx timeout [ 2073.797229][T24577] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2090.584646][T12899] Bluetooth: hci2: command 0x0405 tx timeout [ 2098.749194][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 2103.865653][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2105.146382][ T5712] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2108.985685][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2137.146844][T24572] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2139.723464][ T13] bridge_slave_1: left allmulticast mode [ 2139.729896][ T13] bridge_slave_1: left promiscuous mode [ 2139.736634][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 2139.749318][ T13] bridge_slave_0: left allmulticast mode [ 2139.756134][ T13] bridge_slave_0: left promiscuous mode [ 2139.762273][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 2140.042328][ T13] bond9 (unregistering): (slave gretap2): Releasing backup interface [ 2140.085516][ T13] bond7 (unregistering): (slave geneve3): Releasing active interface [ 2140.093597][ T13] geneve3 (unregistering): left allmulticast mode [ 2140.107196][ T13] geneve1 (unregistering): left promiscuous mode [ 2140.114185][ T13] team0: Port device geneve1 removed [ 2140.159311][ T13] bond3 (unregistering): (slave bridge2): Releasing active interface [ 2140.180968][ T13] bond5 (unregistering): (slave bridge4): Releasing active interface [ 2140.208259][ T13] bond15 (unregistering): (slave bridge9): Releasing active interface [ 2140.227880][ T13] bond16 (unregistering): (slave bridge10): Releasing active interface [ 2140.262032][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2140.271319][ T13] bond_slave_0: left allmulticast mode [ 2140.280688][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2140.291176][ T13] bond_slave_1: left allmulticast mode [ 2140.299720][ T13] bond0 (unregistering): Released all slaves [ 2140.309663][ T13] bond1 (unregistering): Released all slaves [ 2140.323153][ T13] bond2 (unregistering): Released all slaves [ 2140.336467][ T13] bond3 (unregistering): Released all slaves [ 2140.369039][ T13] bond4 (unregistering): Released all slaves [ 2140.384884][ T13] bond5 (unregistering): Released all slaves [ 2140.397677][ T13] bond6 (unregistering): Released all slaves [ 2140.414393][ T13] bond7 (unregistering): Released all slaves [ 2140.429040][ T13] bond8 (unregistering): Released all slaves [ 2140.442644][ T13] bond9 (unregistering): (slave bond10): Releasing backup interface [ 2140.451450][ T13] bond9 (unregistering): Released all slaves [ 2140.477798][ T13] bond10 (unregistering): Released all slaves [ 2140.490961][ T13] bond11 (unregistering): Released all slaves [ 2140.504738][ T13] bond12 (unregistering): (slave veth41): Releasing active interface [ 2140.514579][ T13] bond12 (unregistering): Released all slaves [ 2140.529621][ T13] bond13 (unregistering): Released all slaves [ 2140.544285][ T13] bond14 (unregistering): Released all slaves [ 2140.559888][ T13] bond15 (unregistering): Released all slaves [ 2140.600242][ T13] bond16 (unregistering): Released all slaves [ 2140.905343][ T13] : left promiscuous mode [ 2141.009601][ T13] tipc: Disabling bearer [ 2141.029697][ T13] tipc: Left network mode [ 2141.063161][ T13] IPVS: stopping backup sync thread 28995 ... [ 2142.803982][ T13] hsr_slave_0: left promiscuous mode [ 2142.819930][ T13] hsr_slave_1: left promiscuous mode [ 2142.838652][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2142.855175][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2142.876897][ T13] veth1_macvtap: left promiscuous mode [ 2142.882413][ T13] veth0_macvtap: left promiscuous mode [ 2142.888021][ T13] veth1_vlan: left promiscuous mode [ 2142.893238][ T13] veth0_vlan: left promiscuous mode [ 2143.432873][ T13] team_slave_1 (unregistering): left promiscuous mode [ 2143.446662][ T13] team0 (unregistering): Port device team_slave_1 removed [ 2143.460335][ T13] team_slave_0 (unregistering): left promiscuous mode [ 2143.468747][ T13] team0 (unregistering): Port device team_slave_0 removed [ 2144.007128][ T13] IPVS: stop unused estimator thread 0... [ 2160.189085][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 2169.145607][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2198.108616][T12899] Bluetooth: hci3: command 0x0406 tx timeout [ 2201.148550][T24574] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2221.633914][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 2233.145276][T24573] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2247.235486][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2265.145625][T24579] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2283.070820][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 2297.146030][T24577] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2329.149062][T24574] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2339.385377][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2344.517354][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len