last executing test programs: 3.153083017s ago: executing program 1 (id=3014): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x40305839, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000001c0), 0x3) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) sendto$inet6(r2, 0x0, 0x0, 0x40000, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) getuid() (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0xb, 0x2, 0x20003) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'macsec0\x00', 0x0}) (async) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r7, @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x2000800) (async) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) (async) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@gettaction={0x114, 0x32, 0x2, 0x70bd31, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x89}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'vlan\x00'}}, {0xffffff1c, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff3b}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x14ee}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) (async) socket$inet6_sctp(0xa, 0x5, 0x84) 2.803815576s ago: executing program 1 (id=3018): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0xfffffffffffffffd}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.627728271s ago: executing program 1 (id=3021): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000000c0)={0x90000005}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001c00357425bd7000fed3df2502000000", @ANYRES32=r3, @ANYBLOB="8000a204080001007f9200"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) r4 = socket(0x2b, 0x80801, 0x1) listen(r4, 0x7) accept4$vsock_stream(r4, 0x0, 0x0, 0x80000) epoll_pwait(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) writev(0xffffffffffffffff, &(0x7f0000000780), 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x1d, r6}, 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=@can={{0x4, 0x1, 0x1, 0x1}, 0x0, 0x3, 0x0, 0x0, "e212c8449cc3850d"}, 0x10}, 0x1, 0x0, 0x0, 0x44}, 0x24000000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, 0x0, 0x17) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140100002500010300000000c00e000001"], 0x114}], 0x1}, 0x40000) recvmmsg(r8, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0xffff776b}, {{0x0, 0x0, 0x0}, 0x606}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000001d40)}, 0x8}], 0x4, 0x20, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, 0x0, 0x0) unshare(0x8040480) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r10, 0x11b, 0x6, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.836543731s ago: executing program 3 (id=3035): r0 = socket(0x15, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x7ffffffc}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x1a043000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r1, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000210001002cbd7000f7dbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x408c0}, 0x8014) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x44}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.833316567s ago: executing program 4 (id=3037): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x31}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x18, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)) 1.734317148s ago: executing program 3 (id=3038): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000240)={0x24, @long={0x3, 0x2}}, 0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.704703182s ago: executing program 4 (id=3039): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000480)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) recvfrom$rxrpc(r2, 0x0, 0x0, 0x10001, 0x0, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.597285855s ago: executing program 1 (id=3041): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000020000000062015f00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={r5, 0x8, 0x9, 0x0, 0x12, 0x1}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000680)={r5}, 0x8) recvmsg$unix(r1, &(0x7f0000000500)={&(0x7f0000000180), 0xfffffffffffffdc7, &(0x7f0000000440)=[{&(0x7f0000000200)=""/230, 0xe6}, {&(0x7f0000000300)=""/70, 0x46}, {&(0x7f00000006c0)=""/147, 0x93}], 0x3, &(0x7f0000000380)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred]}, 0x4000) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, 0x8, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x8090) socket$kcm(0x29, 0x5, 0x0) 1.512383741s ago: executing program 4 (id=3043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a320000000014000780050014000300000008000840000000000500050002000000050001"], 0x60}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x20, 0x1, 0x2, 0x7, {{0x1f, 0x4, 0x0, 0x18, 0x7c, 0x66, 0x0, 0xd, 0x4, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x2c, 0xa7, 0x1, 0xd, [{@dev={0xac, 0x14, 0x14, 0x37}, 0x8}, {@empty, 0x5}, {@loopback, 0x4}, {@empty, 0xe0000000}, {@remote, 0x1}]}, @timestamp={0x44, 0x24, 0x20, 0x0, 0x8, [0x3, 0x3, 0x7, 0x1, 0x6, 0x4, 0x6, 0x2]}, @generic={0x89, 0xa, "4e7490284bef6c7b"}, @generic={0x7, 0x9, "be5d14bd9df472"}, @ra={0x94, 0x4, 0x1}]}}}}}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x5, 0x0}, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f00000003c0)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}], &(0x7f0000000400)='GPL\x00', 0x100, 0x55, &(0x7f0000000440)=""/85, 0x22da0ea3ee209e66, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xd, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], 0x0, 0x10, 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001d00)={r7, &(0x7f0000000c00)="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", &(0x7f0000001c00)=""/210}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000007c0)={r1, 0x6, 0x3, 0x80000000}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1a, 0x8, 0x6, 0x2, 0x1040, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000001d40)={r8, r6}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x20, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000980)={r1, &(0x7f0000000880)='}-\x9e]\x00', 0x10000, &(0x7f00000008c0)={@_ha_fsid={[0x2, 0xf]}, {0x10, 0x0, 0x30, 0x6}}, 0x4, &(0x7f0000000900), &(0x7f0000000940)=0x195f}) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x3a, 0xc, &(0x7f00000000c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}], &(0x7f0000000140)='syzkaller\x00', 0xb, 0x48, &(0x7f0000000180)=""/72, 0x41100, 0x2, '\x00', r3, @fallback=0x29, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x1, 0x0, 0x101}, 0x10, r5, r6, 0x1, &(0x7f0000000ac0)=[0x1, r7, r8, r9, 0xffffffffffffffff, r11, r12], &(0x7f0000000b00)=[{0x5, 0x2, 0x10, 0x9}], 0x10, 0x3b}, 0x94) sendmsg$nl_xfrm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="68020000210001000000000000000000ff0200000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000a001000060000000000000008000b00000000002c001300e0000001000000000000000000000000fc0000000000000000000000000000000000000000000000cc0111"], 0x268}}, 0x0) 1.511032498s ago: executing program 3 (id=3044): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x8e, &(0x7f00000003c0)={@multicast, @remote, @val={@val, {0x8100, 0x2, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@remote}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x8}, {}, {@multicast2}, {@local}, {@local}, {@remote}]}]}}}}}}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffc}) (async) ioctl(r1, 0x8b22, &(0x7f0000000040)) (async, rerun: 32) r2 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x400, 0x0, 0x1, {}, [@IFLA_VF_PORTS={0x28, 0x18, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6729c81bf6727cb979f7bb697bd2c957"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}]}, {0x4}]}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x48}}, 0x0) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x22100, 0x0) (rerun: 32) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x9) 1.472939265s ago: executing program 0 (id=3045): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000740)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff"], 0x110) sendmmsg$alg(r1, &(0x7f0000000c00), 0x0, 0x40) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x4) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), 0x38}, 0x40000061) 1.430386254s ago: executing program 4 (id=3046): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) recvmmsg$unix(r1, &(0x7f0000006a00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/240, 0xf0}], 0x1}}, {{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000940)=[{&(0x7f00000002c0)=""/39, 0x27}, {&(0x7f0000000300)=""/34, 0x22}, {&(0x7f0000000340)=""/231, 0xe7}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000001180)=""/91, 0x5b}, {&(0x7f0000000580)=""/236, 0xec}, {&(0x7f0000000680)=""/166, 0xa6}, {&(0x7f0000000740)=""/147, 0x93}, {&(0x7f0000000800)=""/143, 0x8f}], 0x9, &(0x7f0000000a00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000000ac0)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000b40)=""/197, 0xc5}], 0x1, &(0x7f0000000c80)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000000d80)=@abs, 0x6e, &(0x7f0000002600)=[{&(0x7f0000006c80)=""/4104, 0x1008}, {&(0x7f0000002300)=""/124, 0x7c}, {&(0x7f0000002380)=""/200, 0xc8}, {&(0x7f0000002480)=""/18, 0x12}, {&(0x7f0000000e00)=""/140, 0x8c}, {&(0x7f0000002540)=""/135, 0x87}], 0x6, &(0x7f0000002680)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000002740)=@abs, 0x6e, &(0x7f0000003c80)=[{&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/54, 0x36}, {&(0x7f0000003800)=""/220, 0xdc}, {&(0x7f0000003900)=""/74, 0x4a}, {&(0x7f0000003980)=""/68, 0x44}, {&(0x7f0000003a00)=""/176, 0xb0}, {&(0x7f0000003ac0)=""/104, 0x68}, {&(0x7f0000001200)=""/169, 0xa9}, {&(0x7f0000003c00)=""/112, 0x70}], 0x9}}, {{&(0x7f0000003d40)=@abs, 0x6e, &(0x7f0000004dc0)=[{&(0x7f0000003dc0)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000004e00), 0x6e, &(0x7f0000004f40)=[{&(0x7f0000004e80)=""/86, 0x56}, {&(0x7f0000004f00)=""/63, 0x3f}], 0x2}}, {{&(0x7f0000004f80), 0x6e, &(0x7f0000005280)=[{&(0x7f0000005000)=""/100, 0x64}, {&(0x7f0000005080)=""/196, 0xc4}, {&(0x7f0000005180)=""/206, 0xce}], 0x3, &(0x7f00000052c0)}}, {{&(0x7f0000005400), 0x6e, &(0x7f0000006940)=[{&(0x7f0000005480)=""/160, 0xa0}, {&(0x7f0000005540)=""/48, 0x30}, {&(0x7f0000005580)=""/235, 0xeb}, {&(0x7f0000005680)=""/220, 0xdc}, {&(0x7f0000000ec0)=""/252, 0xfc}, {&(0x7f0000005880)=""/4096, 0x1000}, {&(0x7f0000006880)=""/165, 0xa5}], 0x7, &(0x7f00000069c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}], 0x9, 0x21, &(0x7f0000006c40)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@union={0x3, 0x1, 0x0, 0x5, 0x1, 0x98, [{0x5, 0x3}]}]}, {0x0, [0x30, 0x30, 0x61, 0x30, 0x2e]}}, 0x0, 0x37, 0x0, 0x8, 0xbf81}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r2) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000001140)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100400}, 0xc, &(0x7f0000001100)={&(0x7f0000001000)={0xdc, r5, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x3d}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_TX_RATES={0xb0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x200, 0x8, 0x4, 0x0, 0x5, 0xfe00, 0xf]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x100, 0x0, 0x80, 0xb, 0xe6f, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0xfff, 0x1, 0x5, 0x4, 0x1, 0x10]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x5, 0x7}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0x9}, {0x1, 0x3}, {0x1, 0x1}, {0x3, 0x2}, {0x3}, {0x0, 0x6}, {}, {0x4, 0x5}, {0x1, 0x6}, {0x1, 0x6}, {0x1, 0x4}, {0x1, 0x9}, {0x6, 0x7}, {0x2, 0x2}, {0x2, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x7, 0x5}, {0x4, 0x3}, {0x4, 0xa}, {0x4, 0x7}, {0x3, 0x3}, {0x2, 0x1}, {0x1, 0x5}, {0x4, 0x3}, {0x1, 0x7}, {0x2, 0x2}, {0x1, 0x1}, {0x2, 0x8}, {0x4, 0x1}, {0x3, 0x5}, {0x0, 0x8}, {0x7, 0x8}, {0x0, 0x3}, {0x5, 0x9}, {0x0, 0x9}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x12, 0x18, 0x36, 0x1, 0x5, 0x6, 0x6c, 0xc, 0x3, 0x24, 0x1d, 0xb, 0x30, 0x9, 0x20, 0x19, 0x6c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x0, 0x4, 0x3, 0x24, 0x36, 0xc]}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20010004}, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r7) sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4180) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000002000100000e400058"}}}]}, 0x48}}, 0x20008080) 1.333222548s ago: executing program 2 (id=3048): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x1ec, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x198, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x12, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0x11, 0x8, 0x4}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfffffff7, 0x81, 0x80, 0x1c, 0x13, 0x4, 0x8}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x26, 0xffff, 0x8, 0x2, 0x2, 0x8}}, {0x4}}]}]}, 0x1ec}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00\b\x00?'], 0x4c}}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x2, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x23f}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4000054) 1.174377848s ago: executing program 2 (id=3049): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="40005200060010"], 0x24}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="40005200060010"], 0x24}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x28, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.071915109s ago: executing program 0 (id=3050): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="baccbc8d220f86c5525f5709e195e57ff5f0", 0x12}], 0x1, 0x4) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xa, 0xd}, {0x10, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x3, 0x7, 0x3, 0xc, 0x6, 0x2, 0x6, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 1.027491171s ago: executing program 2 (id=3051): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = accept(r1, &(0x7f0000000180)=@hci, &(0x7f0000000280)=0x80) sendmsg$inet_sctp(r2, &(0x7f0000000440)={&(0x7f00000002c0)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f00000003c0)="5ff48293c561fe1c600741568c0f9afa04690bf21537d3de476b6926daba6c48eb5387a14f764ba558c1bc87c8c61803618c1045", 0x34}], 0x1, 0x0, 0x0, 0x42}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0xfffffff9, 0x4) r4 = socket(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000480)) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xfff0, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0x10, 0xffff}, {0xc, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x9}, {0xffff}, {0x7, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2001c061}, 0x8000) 897.733513ms ago: executing program 4 (id=3052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) r1 = epoll_create1(0x80000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x17, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20002004}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) recvmsg$can_bcm(r4, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x40002163) ioctl$TUNSETLINK(r0, 0x400454cd, 0x18) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) 796.065127ms ago: executing program 2 (id=3053): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r2, 0x0, 0xcd, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x44}, 0x4, "957b0a2860e881b43bc6fabd86f5fe54a3493bca5f1a549bc539d170cf2e21f5", 0xfd3, 0x3504, 0x4, 0x9}, 0x3c) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r1, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000008500000056000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 736.801428ms ago: executing program 0 (id=3054): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000200), 0x12) bind$x25(r0, &(0x7f0000000080), 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f0000008040)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000008000)={&(0x7f0000003400)=@newtaction={0x4bdc, 0x30, 0x816, 0x70bd2b, 0x25dfdbff, {}, [{0x51c, 0x1, [@m_ipt={0x518, 0xc, 0x0, 0x0, {{0x8}, {0x4c0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x10d, 0x6, {0xa, 'raw\x00', 0x6, 0x0, "9d47e599e284e139da27dc2ef6afc27bfbd432a3edbcb0c01bcdf7d07a941ba5ebbc19a371bea2da8588e9ecf86d45b1d8d9d399426f913cd362990b76bf5170f2d882379848e46172835968e79aed672ac61cc0757041155633e12b4ebe66c28861a059de20584fb913d246db8ec28b1138b8a5d296d1a35a5f0f77bf1a32135d1001c599db02929f68c1c87ae7003f7474ca00133439d58b7baadcb96cf70d9a93c95e34c1e66936525624b59e518596be45f3371b132e42aa9b890f7629a259a35f6c2926a71a7afed14391637cf55608ec97681e416af4a29ba269de4a9a5c55c9"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0xba, 0x6, {0x3d, 'nat\x00', 0x6f, 0x0, "46b56010c0a5fc3e5f97cad7144bd983359fa9eea96f123f57c929f575f64e4350927ed9d6d4f6583e2ce3c0ce107dde4cf858a1277d2d62fcff5c3fbaf03d6b24478f25383b8cd8ccb02481dfc64f6d846407b15aa753bc58a8b598f363e5aa0dd10ad18475126348799894e6410b6bf8d25f6ce19c4716017a803a13c904b613878dba66fcc24f0c5242b3fe6c0a22"}}, @TCA_IPT_TARG={0x122, 0x6, {0x7fff, 'nat\x00', 0x96, 0x81, "85736e8fd65f95c75e016c0f3f69689635a6431cb2646dfa1114c347380dc2f9aeb0efa493fe4f834ce2a3672ab5423ea27770d33a44413c005a34c6136a050bcebcda0f805763d7ae8b8e47fd186eba36cd34778db767822e4ecf5a5f9097bccf72889f3072a0c0ede914b7d17346c5b979ce8ee3b16cd414f7dadd65eb00b49cdc890f80bb3e42059913015763a5071d5c22eca05c6a0d82a066cc16fc88f4cc938fe799032c0634615e951b48fd60c76aa5ede5a9edb56afeea363ce02de334d7ac47b6dee17e3f74f88d35362d313f49122901e6f7281276d02b8376cc9eea6778a7587add90e720d02af73995b1a65db9734fddfdfa"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x92, 0x6, {0x1743, 'nat\x00', 0x1, 0x4, "8e237c697b82d1de3e76a5b3b7e65918dc682209256f0ad6a75c6085127b7e6abd54abff6bf158d479b9b606016d68ffe9f580b6ab7546068df1f7a10dbf4f2e674ec1115a83d2c8134d25c72186eb6e8ed342575982fec9d3cb431f5a123b5eecee4596fd0b320a"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xba, 0x6, {0xfff, 'filter\x00', 0x3, 0xa7f, "c2f9b34a05aae96b1845e7cf44dbc6e565990a2a49e167452104925aa7952b9e7ef1c769de8d5e59a859497b37f70d2a4ca296f92e74fc194acd838d745a15ff1823a6e033ef80b39d4e58e673ccfb2a2168e5c39f241f0c590bb7d00546d5273c80c3bd6262014c63d6ec99e1bcde35cfc38fae4779d3e4caea5079e61e6b6f9802386091bb56d4997cd37e8f9efca3"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x6}]}, {0x31, 0x6, "f6d50aa21f0f00c7240e81c5d6d6703eb6d4d5f6b79fe17bf3243a4ca59b5450f80d1cfeb997fe836854763637"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x26e8, 0x1, [@m_ipt={0x78, 0xf, 0x0, 0x0, {{0x8}, {0x4}, {0x50, 0x6, "335275459d331c074fb11acd33f8b9c678d67e8b134e4f85950babea37ca7cfcf378d91f610efa2c62a2333df38539370e45492fd4d49739cd5ed43b340d101ba131299592b637ecb88011ed"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ipt={0x1a0, 0x12, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0x47, 0x6, {0x8, 'security\x00', 0x3, 0x5, "7905744be7c6b425391e0397151cb2188e171f3074b912f35936256ee7"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0xc3, 0x6, {0x0, 'filter\x00', 0xa, 0x6, "858ddd1367ffea265575addbc01620e5819b605391a76251d4bc5979dc2aa1412bfa454c2afcaf5fa4be30021c0a3c5d715d59a5915ad4705554b0b493d4dee87a9ba03656f7b6efd062fe4095557fa43406aac0e26dd04d4e68d6ee0a91ddb75bdf661eb65e1a2d373caaa7fd9ee53256de25ec80131aff92e7776746384349212c988e7e227930a00385bbd721a82d67838ebca125c4241c"}}]}, {0x38, 0x6, "cffc4a5c6b2f6cdc8b083ed1250945cc1bee118b40e02d137fd1e429a1389af58d95d8c02580a23e7a1c1f0a57cf755903666c18"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ipt={0x12ec, 0x13, 0x0, 0x0, {{0x8}, {0x11f4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xb7, 0x6, {0x5, 'mangle\x00', 0x81, 0x1, "36fdeac7ab0d2e340401e9841ab84ecb3f66cd7b8770b23544613bfb0c70387d74357b2f6eb8f1e03214103ed498b6942116f1a900aca0f1dca11299249eab6ded2706705e7a21be3f9d658e2bb3296ae54a67bfef14cd521aa8fc09f7dcbe2f5fa48353b376f21059967bb9d44baa63e1be4fd93e86e084779c967235c29b29c8e1bad0b9b491e72104e60fa2"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x4727}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x102a, 0x6, {0x5, 'mangle\x00', 0x4, 0xc, "39bcd9cb1e22278ff71238224f68d2aff1d783bf3adea6cca3b4e14842753a5ec2e9ec630317efa969cc77c9a5a4e8d5e1293ab374ff2383a250f8ebb861cfe53eda4d37e10fa0e35dc35ea0ba1a1a7a1092be470c219681845775fdb11001c911c54a20b4011332d77f40f978c0d4be95201d70957499aff5f00374b419b3f2e403cac77083fb014d08c305a4846608853a76697e25012389d2c362d4e131759b0640dbfeb91fd2167b3ea1a4e19c19b60e7e15ed4934f38b1dd41ed4856fbeb34f81b6ef204b2e201bb9356f036d1264c9ff123cccc92d798af92ae0fb660f33351c27aea6f10fdb3ef9c206b5da7d9b66727a612ca5bc7384cecfbab6c69aa83db3f5b002cbd600210c94034f013f3683dd0664ada14a0828b23ca80b3ff4581f3f074ef780cc91c7d0c6fe35a75406451dbb5f4e745ad8d6a802d2e3750ede26f556a1868a6364cf6377bd9c8a701dd8d0dbcdbacfc664ff02d9bcd924724985ebc1ad793a39a7618820638a55474120143042acf0ca8777737114edb57a58927a9e7d858b6c223e3738bcac8c1b40fa662f41ec6226c60492547ced6df8aad9a77a86fa350db1c0cfae2980ee5fa99f08295f19726d9e55e10b1d2b514e4efa6fb910faba6c71ff534f4d423d619ee56392f5c4b801c34131aade70b00e03416a11ac616b749a66b1ff9b3e7687ce72d382b5d95a1b7ac0896182f5caa7d0b60e6f84580863ebd32851226e2db8aa02d42faf844d7639e2e05c6e41d5e2c3ad1f737899703c74d10a6d0d61bfd0db79232516f1027177ebf79896eaf3566ba13f2baabca7cbf26ae6b8cbcea6816bf6b10ca2646caddd115b4b32c38fc32cf7a4eefef54ac7d89d2152418f88164acc4526a05446ddee89aaca969ee818302d83184731555a96ff401816fdc296a39345ee9ea0092dbd1a29ef998b92caf68e31483ee2d0bfe924a44c6e96677e8a6821b39c1c7bb96426bd81be2a490025f3c0bc2b724b49ecde4f5acbf1e9e76e6b6b052daaaaaf5d757407690034216469add416f0c506098747d52f447936487aabe937ad85f5475dc986e1ccb3128e0e4ed13bd4ac7096b8622d421e0e80b54ecbfcb8b84c9381c0f2fcd7922de0072cb9c34ffab36d91f2174f5fdc533aabc3c05c4041c6e9c66dfcea687370f206f8a0d1cc0800ddb070aefd4d70688fbcdd1ba0574f791b50c13aa16f91684fbf1eec610e6e3b6dcfe9a65e9a3302c5460afe089c9f3f53ef8bd9ca5d8183e13589d4931e2120d7a5bf4fa8003ef2ef5d4ee8e266bc8c2e313e0212fb8c0ba1bd99eae67528046dfd2192e78c23fcb0a3c669ff030ea834beecfe60269208b003762acf2dd656231bed47210b14728b20392303691b3dd3c15f506447816c4279e80ae98bb916ccee95ae30b3f51c741ccb99efc078178c0a9cdbc3c39d3d230feff531e46cba36b5170bf307d02b5db19637adeaad424bc678c47f59936c5d7b2508dcf67225be93d40f403f14f3ccc66abfae8808fb76aec39df5bf10ea577b15d46cbdacb66150786d9729dffb3e65da7a56ab27237b9e39d230f218173945cb4da0f95fb364ee78135c0f9c4a1352934d9be65ce4754faf45149f7015c673667d77a20cdbb324f9f8e62b1c525f5a59afea85219297c39d57e693f4945e909d79929f0d887e9917f7cde1a20d76976ea58c4be1d5e17f586cc4aa1ce729a748b567f44ed681d2e03e3ff0afa9527d499dcb2473b445acc6b7ddbff42da3b8a4516b34be76d3d30177666109180fd5bed7a88994e7d4e7188447bc45c012024e14d8d1903701b1aee94a5a2a1bc78b31a3914e5f261f5d7398ca1e51d050517253632036f72e2a15d29071427adac9e72a3686a122833407db784073365736733fd69f4e0e05fdf699cd3a384633d226ff0c1a43a1febf19ff4f63ddf1894db3abb62a5898ba330167144e0198cd8810c7055846f33425e075eaee3d7c51400b579d9599ca766867ffa5f1f3aac08934c2bdb968f6a22121e4615a9c0f5957fb2a7cf386ff4308719aa557fc83513cac3ed1e21928d83fd3b9665f49f1cc9483cfb4fa864fa5cb25b607f7ade12e33a650520634a2c50dacaa9bc17390dedc51ddbbec444a5a04fc6fb81bb2e38bf1a087b727c1eca712d51473f26cabd5a9bfa44cd18e02e4f579ff116bb8f564d96c4d18e67ac5f5edaf0f10dd63da1f3eb601d167a483410ca494a3df90dcf08a7575bc7f5d0ab98e7a7a1911de85f3c3d4d0b5f09d6d1118e2388f6e5de85223cf62ff4eb6da18a2d9b95c6b775c5623c757e478d4795615cb0d061f8f3ba220846195646ca35e33f881c0a8bb5e14f290edbe787e0487093421b4ffe10943bc00badfa590107939065dbeb6db4b26d65ea0806a70ca461a8fb80e4056db7533d251d6a316019d7ddaa28dbd6e35c81c894c3731967e1750522fc902aa5d445fe21eb511defb9e54113a56780d735594b01df25ee1e7c6bf0693d6b713d2eb378c3c62dc7fdc0ef75ce302acb01174286b3326c5b03f85bf09a3f51500e243434f4cf02ea770823d613daa2d53e29dac8ed34266bcfb98d62befffbf86b65868db8125441be93007c48154970d349494dbe0aa7af531ddba06e1db232aee5bb29b7d5a4ad77154299d2af4d52e6feba037a7339085b88bc78c241486873fe788c759a5439ef3d6caad962b57efdf8c1574e882cc5c9bcd740588f303239528fb1dc7735f9b01388fe4ad612835393fb6fbd65a2eb3960e6fd3d397f7fc0f1d4cd66abbc30b6e896019de1beb31df2828de897c2e3bd1349ee4eff18e563cbdd9e48fa57d24cba3f8c63d1e067ffb9d4fb77fb44fdb55640553b72b4a23cefd89576ed65b558309e7a467ed72c76c2ae662082fe8dbc2e57f91023aff2f014d20663c1640ee887f58786f033f07cc77c6130446767d4c3ba7f46935570f811543fde0d9760882084480c7b0734f6593a946966d698f76ee2c767c9d077b9826351b93086b679c43b2cf79d447cfff971a56e84ee84dbc67ce29ae96adcb934858ee4f8eae567ba53bd69c017761a67d9e8998c14ac7e0007b5e5175bb33e069018a3067dfd6152948ef1f9ad1881659fccbd3b711cdad191ac7741bbf11885c0f18fb241108cb38e7292f3e0f535332e4a4bae38f3d6283546d20fdaa26d400ac8a74eee9d19a042d1fa597aced6a2e4ec6a3072381abd4d7197b3cff0fc2b89d099625445f558e6a62126d079549a45c2ad7d846259b9e98a0b2a8434d3ca0fc3838ac46e97940bf221ebfa935f81ed66c9e6eadbe06d9d2884172ad9d4b2c5ae5c91524721ca14de14ae143cb6416c660f03fbb5ecf420ed8577ec4453a9d1fe5a873ed469d6d4b0f79284e18efc191694259b8aaed5c4d55c58ed42a1243e6674716f658cff9c90cd3dce98f683fd72b30b64ba9ef52d12ad65b872eb90f591faedddd34f7e7c4fdb2e982f0c87445e234ab5c10b3d02f2aca43c4bfe3c8f479251e8e8322d6b645bc494a2ffd2994b64c8caac99493c50c3db6c54f3bdbf93e4afe8283142c30ea9877ed8ab3ea74940c404a849f0f0ab613a9ba4215654b153a03a325ba3bb9857ba371384f79b47463c5d8db6dc4613dfa0a6a16b2957bc7e59be4b4affcb877bb9eda2375647f86b466e7171e1824ae13ad15e5f3d20266121b927861fe9f0fa648f2a83b9be3d99918f17ad622f5040d940411c9ed6d35374b943e67b7e676c6c945306f21ff2715904faf2b1dff4d4a78584f661027ce7f8247402a46d5bc580596a1a1d956ebadbe94439477ed32412beb6ba4ac3cb805a7beceb234d398da49abedc16355ef8d186c5323235e409aba641b16fd90d9ea9f12f95465a0a8fe1112c457fe1fdcc80d6c4aeaf0ff65db6a15dd775517e445fae3266ecf69610db5186cccd96592ff95c562838f8b826054abcdf4b474a5fcec1660aee7fe2a50e432d19b12301fcd4cd0503fd5022ea03ab5f9955e91af9874cea41455ed917c0a5ebe48973a35aa75d84738046ad87566c4af2422eff3749d37821c4b37ca46bf9a80134199a56d369d3e4d38181a4ca658b461d9a47affde78460841850772142a4eb62618450e7d7130dc0057991f091682d16c5938d45b7ac8efeb3f1e0df3ae516d3c7dc63c2c414e19fcce162f05a2e1cdfbbe2000d230b0e4e159381484f74f826b0d2df7c0058e10c00c2a179e8fe68ae149fd637a5f0ac06f33d869e9d254dca866d333a34a0055a1bb6637d33b24073e6566f3bf663b44b3fcd341c5f97e1d4f80489a90a4d27940fa40bd95e4d17c25f9136fdcc9bc4a478c3e6be34473413a96a95058fcca31dd11c96d15a4169a908b563d5bd0f327f61abf77eb69b2222a15de3c433e6237d9612b4742599a9942d584342df8ed7369ef035062f1789999b7fb34bf22d79227014b740002afe55f57d4a8115b587907bd94bebddfa72d154d083fd7bae60a6a7f7f12dd2adce431edfde0f232212c95771337f92d8ce750f30e9ebc7398e0149a53cb22d9a12370a28fe2cfa5a24cb90c755e21aedd7cb0d55838f14c07d2d9e666cc1996c03defa044798bff6c45f737d2f35dcfff078a095e8eb2298a27bfbc7e51c23838640476e6567be475462a5e146bcd74ddfd5e2913258702fab231e63efe2d309e2a5a0786ef595e56064cd8d4896882a535d115862bdb2fede0a98827f8cffe5b71d21381496351512fd18610db7fdafb14b96d5463a9a6bae3265bf5298dc9e1083a0e5ad9206aad32a13a6fe160af2573fed4d419f98f7c7dfeeb4f58fc2fe52c0e3eb3e74b1fd0be9151522fa6d29dc1167f242079629b2d7c355ece73b77406bfc5e67d0d7cce3cf8fcfb8a709b73741e679872b9396a25976ded7afca952aed64367acd63e90e418dfe01365a2ede3bc1610c57f0ef2db65d3581bb6d60fb7212ad437b137554858e1597af6674ce75535aec2ebbcdc6d9d9056dc0adfa06b61c2ddb9087a197667ddc972ff13a675e1cab31397c9fe7214418d190eaf42d8bc7e29e55537e7dc0c69fac3f57db2093887fe46f4e86f171376ef73184e0d867ecf78008be5ef5c1481f210cb24da03d8a646259463a6f2eb37bee416a4e13a7a206013cae5ea6ee0f99dba230be7318982a9ea7ef2e3ed2ce1f804c5322b4b6d1243b1e3b6d9c40a3c56329d6f711fc3b78f0be41551aed05abe68d3bc6c2e4d6cbd80f06c8991483cad4a3826da9e1b9e0129bc70b3a79d24443ee30a35b549a39bc56ba6add3159abe4f6b7442eb66d27826ceadd0b7e66353e11515884d3a90bf2221d788f999f99216fa5e0324042a6aacf19742c0c7d7f336a5d34b7dd55315a1f40ce971e5b0c8500a97c6f15f7061992da15b2e10bba8ec4ba036171871ac83b93a16b77e8aa0afc8ec2cf2ae15b71b315d0ac0c272361359b6baa2aa7d008a46612d674ee56a4c431756978fdd5e2b29160dae1893d2b4490488de79befcc10909a9d150ffa38c59f4a240648e45e716c4981c551ff8caebc13642380f720349d4f92fc5016a60876b67fd61f33e1ee0d097824c31352631f8e144334500f35d35442235e1353e42cfd1269ba2d06627ab50b0ec3d653a141a2e15ad7578219469a254e20d05a4ee097e34891ebd9455e724abbe64f2ba7e50a1502a19b9c3469f6c62083893fab3b3d79ecc5fb13884bc05042ff8c805ce6f64c3e9eaa87728bfd33abcc36264d1194769e46ec5cfdb5f3280dfd22ac4f95c459c34c61c38d7bd85730df1ce0e8f3883f32d"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_TARG={0xe1, 0x6, {0x2, 'mangle\x00', 0x81, 0x5, "5a6c9767a5438c758ce205d1c7f0796aa92dd2948a077bbe12de18b13c9bcd5ebe8d739b1ffda0a48550e2ed489ecb6ec9375666ebb9ec0da6b47583af94f1e6cddaf3c904cf2cac043f42004a0bfbb9ea7a6a95560428305af3c54ce3240a4c47fbb69a4c121a31aa8af88945fb4cb7975660f6147756cf36da11cad61a54eb46cdd0a04b2fab2ee815978f2af0706508b9259ed8974d3dbcc7a167b61fe1250b89e0a1a50d4d4d41dc42012ba90d8061eb1464e8dc67"}}]}, {0xd2, 0x6, "910d803430768832471a9d2296393c47ac6eacedebe6a8746bd661d2e3241785be83ec4c580419a5ae751deea0b588fca778872f3eff94476e3a96519200c6247263edfa35f82f94b37cc0f5cb0bf1d5e227bb06c40800719d3035ce5072fe0892dc55b08bcea1bffa48b28de19e688e7b7476a9a5f929be6316bb643ca4024075eccac29cc819203bf21001b99b052c81c32b051ddf127e453fd6f38c04d3ea7577e73b739e00d5792ffd801f4085646eda8de2cc5ee42e6f50a255e44a7b3d84c60959aacb0ea61bd1a13b9935"}, {0xc}, {0xc}}}, @m_ipt={0x158, 0x2, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x37, 0x6, {0x3, 'mangle\x00', 0x9, 0x101, "a8cd8b31497e64a5f14eed3b58"}}]}, {0xf5, 0x6, "ac0d57a0e6da8d72c62870348b520a7da4695b8697fcb6511e3425d015091ed4a73d23bc0f1a4ce69221ff57fed2cf03329cfa23ab483009e129bcd5942bb07386a785ee28518e0aa944f3dd818d747f8eff445e88f5f235bc13824137e41c4bd2ee0912b941b6abffc1defc2ca08c607e04e9dfe3421318ce2cb608bf97e418e0b4852c9d1fbc86ee5a92aa606b880b2744a8bb7d7e3e93a24a7cc67b1abee85748afbcba0ee423fc4d2802c9ff89b4c033909d8216ea07bc1d704563b71b4dd04624ea2d2724e490d24ef1809e8fb537a21e85d483c41e1d149e0387fc4d1476e43dea0941d48d787e763c1a672768c5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0x1088, 0x18, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x54, 0x6, {0x7, 'security\x00', 0x9, 0x0, "7ad93d891559335dc772cb10a83dbe2b70fefdb79730da86f6f94be061e368750eb47622086c865add93"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x5b0, 0x1, [@m_ipt={0x18c, 0xc, 0x0, 0x0, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x46, 0x6, {0x2, 'filter\x00', 0x6, 0x2, "881b2f3b36eb199c53ec13268a95adb7457dbf7c1ee0b8ac965dcb8f"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0xb4, 0x6, "d09cc2a824d37d824c2d2cf449048940576de577a20c9381642d595ea3ab8cea45bd8e398c05d5ffa0c9b20e575c4aeadb7f0793eb81c402bb6703839ce93b15ad469f7d48d4c6ff624589a20a06fd72960ce6b12434de50ab31ee8c81acdf414a29d9666581584f1aec173d243b11a7f3e8b204cd3752e0bac691b161cd51a4655c13c10c31b3b5b7c03afc701cdc6010601850bbbbfb3cb7d74aebc758732358fd84476cec70184c0020463109f77c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0x2e4, 0x11, 0x0, 0x0, {{0x8}, {0x1fc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x9f, 0x6, {0x101, 'security\x00', 0x0, 0x3, "44cdd0c46a8af2a7b1c6bcb9738c6cf4da28886f41423f9d9bcb2063417b5ae71bbd04207bc872c55c9d6ac63224c1ae267a78f4aec0a8c96eb07d95c6a0347341b62094e4c875dc183a2919e3781037dd2b2a04f542403dbc822bc9a125b6850c49a9084622ace11150efd4eccc19d003449a5867"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0xd91b}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0xde, 0x6, {0x8, 'nat\x00', 0x1, 0x1, "5e236766f3dc57bdf69771bb0c66e03b2618d1efd48e278f26904acd9e223141f7d86a4d80e52d12ed22d57faffc83b99dc85a1d05066057d67d43ffa410509e2bd8755f4585302c6ee46354e9a883091f441e99cf603658a712637c983e97abc7025504c8d8cdac3245d8418fbca72ac54224c32d5566283179d7a9be3ad605fc76b0b6d89402421c54e84f21b6e81307db10616a52af20dbf75845973df71b658a9d1631f5a2d0613eb25a3be6f5ae8037bd86"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xffff8001}]}, {0xc2, 0x6, "c84c2064eec55f5b238937267b01586cf6e716b0a61bf55a12e9e5ebec0b2b32f73d505b4cfa244cbbd551843aea817b24f06881814cd110848dc30ba63c85f4cf14112b8196754820b96d081fc4e816206879a14858cc86a694c824ff426caadeff3b82fdb2d3a704583019da4596f9d7ac80cb268a3872690526a788e074bff041b7ee804b3d47fc26e48ef45a0a7bed118089f0f71457e69adab0debc184034833a371c0ce2d519e4f088459d15e52d4cf79201a22a28d8fbe8ced634"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0xc7db130f6a1fc22f}}}}, @m_ipt={0x13c, 0x2, 0x0, 0x0, {{0x8}, {0x100, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0xa4, 0x6, {0x66d8, 'raw\x00', 0xfe, 0x4, "ac48fb5a2edf5e7f76729adce2741f04ecf8e7a310c7f9a06a29cdd03a00bdd0ee01201406eea3422f1b7b8550f0668df991d4b0048ca732aafcb12b8a93f4bc659e14fa7a29510d9f1755c6d9fd977cc4988525750e8a8e53c6bfd0a3086fe2f076cc51bfa49e15872601c8f9c2770afd116ebb14205c88f3c9"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x15, 0x6, "e7b1302353e3da26661617e1cd4da6a1c1"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x1a14, 0x1, [@m_ipt={0x208, 0x7, 0x0, 0x0, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x86, 0x6, {0x40, 'filter\x00', 0x0, 0x2, "41fb6e5a85605bb3a6552b203ddf956d2d6ee4d3fb787370a1db7dee6450427e0014688a7a76ed44df71b30dd4dffc565e3698868f576e5031b373be625ec7612a8938de9cb343d64ad62795f10268b7738a766995ffaa9379e01b55"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x7fff}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xe6, 0x6, "422e65a0ca8cb42f4476ac862fd2e9915b029f0e7d367f5a6f95ff6d488d7cae322943add368b59de8c2e4e32f5ebbeb61d0234014f571627c2c1f93ce293655e1db9fc1da241757fbf224503c84afb9950022febad34333e1b0795fccce4249aaa6ca492b729aa62cd554aa1748a0f15ecb76c34b898ef2015c288b838ba23dfaf771112529021c1e5323bcc24681348ccbf6984d53b67870e0c84ffc084fd7d295955d2ab36bb85d71b94b96590b59dc4b7d1006285b4a56158c2d439c42e28c53b4729bc54189792c4fc9f10d262916af34a092b96911c9e0e89044390e199b8e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ipt={0x10d4, 0x3, 0x0, 0x0, {{0x8}, {0xac, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x9900}, @TCA_IPT_INDEX={0x8, 0x3, 0xffff}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0xf8, 0xe, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xd2}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0xa1, 0x6, "a646c1a6b0151981b627cc3ee0dd1c02b048f5cfa4c5526ae52cc83cb32181cdf7562ebf93945a4c9fb197d23c93933f21dd32db164a8b1afc8b739e1235cc226e2dc5ac63aae9a903da43f9be48ddd95ca6cff45b5c563f090fa088c6af17386f150abe9140baa257635406b99ba702d15a6e240be123d53bb7c39d1f231fe65239da18a73de58686f8118a28cd56c2da0105728c0b6f6712193958da"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_ipt={0x208, 0x5, 0x0, 0x0, {{0x8}, {0x110, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x20000}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0xfb, 0x6, {0xfbdd, 'mangle\x00', 0xd, 0xff00, "884a3a14c3886f41b193fdb48c03d50a009e8d44cfceed49c7267a55f4bd0c175503d823ce2188ffd211c9fecc3d6dc75fc38e2379f5428a79c15e1ac24661b9832bb3c70397e1be8facb054de636b2c22f92e6e261b24afb455df15e9acf2a7041a633f0c022609a35eb7bb849f3b5380e51ef9edd7f8f7c27e1c7072bba95aaf2f9e4be286255738ae487f20736e699b1110f23d059238abf55c3a54f89140a65e9c681cbcbf0b474a121a9aab83af95b0e3cfbef1d2e67e54290df875287e6a33ed276cf06c9b5cdb0f95dc47607125"}}]}, {0xd3, 0x6, "12ae721cc6f3fbc90d4c2b836b75c4dda41647a7f6465cad2c17a94aa1bb5cc35bb75c6080fadd049fd17f6d6ba502756edfb259598dbf32dfed1fa69ed2ff46835b2d6265a58a898e05ef5349aef148a534aa3af9c6e5489650daebdedc3974b3f367a513fe147774dc0fdaa0c2816a56dd60cb0b3c315d487d1ead305f1d71b12d7d4c35912ac0b7547a0dd8b3f6eb47e91e37c6decebd4fa57d3b9876c41cd92bd929b264e7b72acec8fdc81af1b50a5bf6cd188a9eb50c85dd55f127ad1ee7c580ef367e2cfbdbccb24aa15a98"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0xfc, 0x5, 0x0, 0x0, {{0x8}, {0x84, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x7f, 0x6, {0xfff, 'filter\x00', 0x1, 0xb5f, "b5a724db3c451d4c8a4b14e3ec3ef13b9dbc47e6656bc570d63abf9a98efc3ca71ddae5dc8ce6aaa5d98696823d41ea097fdc4d0305bae7e3737103d6027a40cc485af15220c7a2e9be68df4dc37cbd12dfd3b4159"}}]}, {0x52, 0x6, "dcc57c985d40a61d7110b16f65ba81214092c94dfb2348fa217a1d669ddedc43de34d29672739fc49748d6e6d8f717977ac3aa454e48be3f5394b213251e3c2fd10ec969d3897436b0b75ace3ca4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0xe0, 0xa, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x999d}, @TCA_IPT_HOOK={0x8}]}, {0xa7, 0x6, "efa6e6fa927ef6b80049b79f4a24a9693ad0d12818f2884d86e4bc15af811a3937e62f39856616ad23c3717697438a0c6ba82528c428375300c7a07f6b1706fa0a1405157e06fb99e39e7c58cfb4305c1e9e2cecc3812f45f43952957fdf0783bdd5d1236ed051d17fcfd6e5f8460defb93b6ba2ac6ba7e75b09c33760442e950d0ea469b803df791cb8930d9dc82026acc920ce3d4e6cf6ec691f5110d7d8a32927ca"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0x258, 0x10, 0x0, 0x0, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xb9, 0x6, {0x5, 'nat\x00', 0x2, 0x26e2, "f9fde6bb50a0fd8fdf30503dc94d5c3f63d036228b353230093550871677030dfa49393e681c70d0ea82b3acdc1f5050f29054fe56d4101f8658529abdc608aab150250f1b559fd58eb9c6a3db1c190a32101d62803c04a7761ec87efeae601976c065fda19d11cff3b44507a4ce985b26ae4d0aa7ae5acfaa4e03b850fcccb7f7cd390435675802138b79484a0c96"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x40, 0x6, {0x2, 'nat\x00', 0x2, 0x169, "cbade3c6152b7705ecf4454c611e930d7ec8a56ba157"}}, @TCA_IPT_TARG={0xa8, 0x6, {0x4, 'security\x00', 0x6f, 0x6, "1f36c297827dd5186cd6657c3f063edcc8b3862e9d2be40692ce42cdaa1a074e71539dec52edfc83a2f3b5ccd82c1ea0aa2deaccc6bd3466dfd5ded2e81ac139247e99fb08a0f1f277f6545fba0740f97309dafb4d27bb67c985dd22c37f12f714cca67b4b6f5f3fc3eddc09552a7af0361ee00f88a32c66937713a8c37c"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x4f, 0x6, "ef448db8b6ed47c3fe5dcee113c5f872b410e92aa0d267f5419d83b1730d7cbb1f6e9f3f324c10df5ff72f5a6041f16584e89ef4051d9e5022e7d1da4c4a4b15fcf5e6335fedff8813afaf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x4bdc}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x42, 0x1, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="2f0000001220f50004"], 0x20) 690.34361ms ago: executing program 2 (id=3055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f00000000c0)=0x1c, 0x800) recvmsg(r1, &(0x7f00000002c0)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000200)}, 0x40010021) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$sock_int(r2, 0x1, 0x10, 0x0, &(0x7f0000000f00)) 623.941043ms ago: executing program 0 (id=3056): r0 = socket$l2tp(0x2, 0x2, 0x73) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x84, &(0x7f00000000c0)={r3, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0xfffffffd, 0x79b}, &(0x7f00000001c0)=0x9c) (async) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000180), &(0x7f0000000280)=0x4) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) (async) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none, 0x1000}, 0xe) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 604.089018ms ago: executing program 1 (id=3057): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r1) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) writev(r1, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000280)="5cdfca463865698b15c573a741f182a18ea4af09a6a58fcafa15cc22ad3d49aff1a6ea0a4733129d4acd4e13af0e0473e99c9fab193116602e8ecf1b410b69d3320175a99eb621cd3813ce1eb65f5471c30da1d6cea522e8be64307d510c28cf132507680fa0c9509c2f0d259f1b68f9c6c24c0f178acbf132fd70908b", 0x7d}], 0x2) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x85, 0x0, &(0x7f0000000440)=0x9b) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[], 0x3c}}, 0x4000) sendmsg$nl_generic(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r2], 0x1c}}, 0x40081) (async) getsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0x4) accept4$llc(r0, 0x0, &(0x7f0000000100), 0xc3421b0ba97bf6fc) (async) syz_emit_ethernet(0x52, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004c00004400000000000690780a210104ac1414aa44140a01e000000100000000e00000010000000300000000000000000000000074c0ca5b2dd8f2c732afa1256f678d31686ec56b10274a613781caaaefefd81bb3d522214d14d94245fb386c4508e139b982522d5b0680120e1c1553a3730f31888586c1f74458604390ccd88aa5d03ebf88d8a1ddb8628f2e6dde40ffd7a61675266cc95a0e2c45d697b9e72520e34df5ccd2f4cb8cd6b4c70da3", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmmsg(r2, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000300)="1f"}], 0x1}}], 0x1, 0x4000045) (async) r6 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async) r7 = socket$inet6(0xa, 0x2, 0x0) read(r7, &(0x7f0000000080)=""/58, 0x3a) (async) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) close(0x3) (async) syz_emit_ethernet(0xffffffffffffff20, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}}}}}}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000180)=@ethtool_cmd={0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}}) 596.985964ms ago: executing program 4 (id=3058): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/uts\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x128}, 0x91) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fd55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}, {&(0x7f0000000380)="5e5fc8ab74ee50cd93e4d0f5b4a27daae6817752ea21b5feecc4d1b6e1b3db354e4bc7cc729b6dc6948cc594c9c3a13392f8e575ddbca6b2b947c902ddac0959d49b424cbace3ff65894d88f07df7bef64bc8715a09b0dc7d66bd213247de918b8e023f2cb65062adb8bef863533bc05c0392c447eb05890cef08da04b0db465eac928ee160c82f78b251fde5d958711f83153148621703d3a8cf7"}], 0x10000000000000eb}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r10, 0x11, 0x64, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x113, &(0x7f0000000200)={@random="7f4508b9ba5f", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @val={@void, {0x8100, 0x5, 0x0, 0x1}}, {@llc={0x4, {@snap={0x0, 0x0, "1b68", "f7ff79", 0x8906, "aa7a325cc7ab1a0957735b1bc2334ca92cec2d90e8debf2897d4d1238ab84cbf9a7b01d1cacbe14df7a700595a7d78e9ec3378e1d39f77178add7aff2ea0f24a584a7cc9395819736cc2d78f79783c186f959988c6df9c00b93a4400c7b164ce6041c17053f2674acdd0a5ad75fab6350d08d1d7058049596ba06b8fb17754b7f6fa14e62204fc91830f61f8a24bb8e7c6a30fa3bc4158616e7ad9e03997d9dda5f442340f568cf51e6d6150dcafa7d351e6bbb608b6d813d2c9fb8a7bf0a60b6c31d8b3c0870ef8176fdfa9db20160aac4b3ff608ad58e347c1c2d0c9b6be5fc807c290c79b4af011e954f2ec7cfb6e0c99903c58888d14"}}}}}, &(0x7f0000000340)={0x1, 0x3, [0xc73, 0x3dc, 0xa1b, 0x3c3]}) 496.016213ms ago: executing program 2 (id=3059): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0xffffffc0, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r2, 0x1, 0x1, 0x80}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fedbdf2504000000081e090004100001"], 0x1c}, 0x1, 0x0, 0x0, 0x24004864}, 0x20044044) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r5, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401"], 0x20}, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 464.43212ms ago: executing program 0 (id=3060): socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffe64) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES64=r4, @ANYRES32=0x0, @ANYBLOB="0000000012000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4, @ANYRESHEX=r0], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x800, 0x1) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030004000000001c0012800c00010008000100080000000800f5c24ca060507b74000000000000", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x4c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r6, &(0x7f00000005c0)={&(0x7f0000000180), 0x10, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="01000000000000000800000000220000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=r7, @ANYRESDEC=r2], 0x48}, 0x2}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x42000, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x10, 0x803, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xe27, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, r13, {0xffe0, 0xc}, {}, {0x5, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x50, 0x2, [@TCA_CGROUP_ACT={0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0xfffffa3c, 0x2, 0x4, 0x80000001}}]}, {0x4}, {0xc, 0x3f}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x10, 0x54}}]}, 0x88}}, 0x20040054) r14 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r14, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) close(0x4) 460.153842ms ago: executing program 3 (id=3061): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000061104c00000000000400000000fbffffffffffffff00000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x110, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@setlink={0x48, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x40b, 0x0, 0x0, 0x74}]}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x107}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x141842, 0x0) readv(r4, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000001c0)={0x0, 'bond_slave_1\x00', {}, 0x63c7}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000200)={0x5, [0x1, 0x4, 0x7, 0x8, 0x5]}, &(0x7f0000000240)=0xe) r6 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x1) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a000014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000061104c00000000000400000000fbffffffffffffff00000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x110, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@setlink={0x48, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x40b, 0x0, 0x0, 0x74}]}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x107}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x141842, 0x0) (async) readv(r4, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, 0x0, 0x0) (async) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000001c0)={0x0, 'bond_slave_1\x00', {}, 0x63c7}) (async) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000200)={0x5, [0x1, 0x4, 0x7, 0x8, 0x5]}, &(0x7f0000000240)=0xe) (async) socket$inet(0x2, 0x3, 0x1) (async) sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x1) (async) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a000014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) 412.538845ms ago: executing program 1 (id=3062): sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fbdbdf2507000042f54ea9388c84ce4748800008003c000200000008003a000000000024b03d13d5fcf6b41e752607a0e4e540a2e2c36c25cac2fab208af9560eec7e2ffa48ea303e07dc6e9710465aed5a168a2ecf24860693131f2f720aca68d1da6edfe6d64ec9bf789b3458aa509cfca95d986b94cba9ae4d3f030836b2ba0da1bb1445b2a49e38de0b93e6dfd40cb551a5decc31d5b4c05245f5033deccbdfd5b7510fbebd03bedbf73edb8bc1166e63a8dcfe79ef50f05630c8b1dcd33f2fc39d5c978283905d8ca10149baab41fdac5f49509536c91027de6cc9f6aaf3fb466f9a56965883afdb841f19f166cafa9"], 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x4050101) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014000380"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000002c0)={'gretap0\x00'}) 267.662367ms ago: executing program 3 (id=3064): syz_emit_ethernet(0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd697a262d00383a00fe8000000000000000000000000000aaff020000000000000000000000000001020890780000040062bfe4313f6fff00ff010000000000000000000040000001000000000000000000000000000000018400d45f020bfd785f5527fe0a38650000008dc48dabb90e5baff7253cb3236af806d3"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001e00010000000000000000000710"], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x100, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x3, 0xf}, {0xf, 0xd}, {0xfff2}}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0x2000400c) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00\b\x00?'], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000004800011d00000000000000000afe80ff", @ANYRES32=0x0, @ANYBLOB="000000001400010000000000000000000000000000000001080002"], 0x38}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r6, 0x40305829, 0x0) 126.668316ms ago: executing program 3 (id=3065): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x82, &(0x7f00000001c0), 0x8) (async, rerun: 32) sendto$inet6(r1, &(0x7f0000000180)="e8", 0x1, 0x2400c054, &(0x7f0000000080)={0xa, 0x4e23, 0x10001, @private2, 0x81}, 0x1c) (async, rerun: 32) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={r3, 0x1}, 0x8) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000140)={r3, @in={{0x2, 0x4e21, @private=0xa010100}}, 0xfffffff8, 0x0, 0x3, 0x0, 0xfffffffb}, &(0x7f0000000200)=0x98) (async, rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) (rerun: 64) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xa4}}]}, 0x2c}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 32) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x44840) 0s ago: executing program 0 (id=3066): syz_80211_inject_frame(0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802ef9"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000840)=""/229, 0x1}], 0x4) (async) socket$kcm(0x2, 0xa, 0x2) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="5d2a000000000000140003006970766c616e3100"], 0x50}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) (async) close(r1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="09fe000500"}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$can_raw(0x1d, 0x3, 0x1) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x4, 0x0, &(0x7f0000000040)) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtclass={0x4c, 0x28, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xa, 0x10}, {0x4, 0xa}, {0xe, 0xa}}, [@tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x2}}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x4c}}, 0x24008804) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) sendmmsg(r10, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000000200)="83b7da51db842d1f5a", 0x9}, {&(0x7f0000000680)="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", 0x7ec}], 0x2}}], 0x1, 0x40) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r11, {0x1}, {0xffff, 0xa}, {0x1, 0x3}}}, 0x24}}, 0x40080) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) kernel console output (not intermixed with test programs): 84': attribute type 1 has an invalid length. [ 161.074229][ T9627] 8021q: adding VLAN 0 to HW filter on device bond4 [ 161.085788][ T9634] tipc: Started in network mode [ 161.095386][ T9634] tipc: Node identity ac1414aa, cluster identity 4711 [ 161.102929][ T9634] tipc: Enabled bearer , priority 10 [ 161.251594][ T9646] netlink: 16 bytes leftover after parsing attributes in process `syz.0.992'. [ 161.355178][ T9653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.991'. [ 161.584433][ T9666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.688360][ T9672] bond1: Unable to set down delay as MII monitoring is disabled [ 161.702896][ T9677] netlink: 'syz.2.1002': attribute type 9 has an invalid length. [ 161.724446][ T9677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1002'. [ 161.725072][ T9672] bond1 (unregistering): Released all slaves [ 161.900519][ T9683] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.1005'. [ 162.130953][ T9699] netlink: 'syz.2.1008': attribute type 12 has an invalid length. [ 162.195609][ T9699] bond3: option primary_reselect: invalid value (255) [ 162.203997][ T9699] bond3 (unregistering): Released all slaves [ 162.258551][ T5800] tipc: Node number set to 2886997162 [ 162.269838][ T9702] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 162.276933][ T9702] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 162.292037][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1009'. [ 162.349263][ T9702] hsr_slave_0: left promiscuous mode [ 162.364401][ T9702] hsr_slave_1: left promiscuous mode [ 162.393866][ T9710] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1009'. [ 162.437645][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1009'. [ 162.649198][ T9728] netlink: 'syz.3.1015': attribute type 1 has an invalid length. [ 162.789912][ T9729] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 162.797393][ T9736] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.1016'. [ 162.895634][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.904736][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.913812][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.922116][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.930439][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.938733][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.071443][ T9752] tipc: Started in network mode [ 163.093044][ T9752] tipc: Node identity ac14142f, cluster identity 4711 [ 163.118296][ T9752] tipc: New replicast peer: 0.0.0.0 [ 163.144609][ T9752] tipc: Enabled bearer , priority 10 [ 163.175521][ T9756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.210916][ T9765] netlink: 'syz.1.1019': attribute type 11 has an invalid length. [ 163.246116][ T9765] netlink: 'syz.1.1019': attribute type 11 has an invalid length. [ 163.460811][ T9769] syzkaller0: entered promiscuous mode [ 163.467825][ T9769] syzkaller0: entered allmulticast mode [ 164.994863][ T9771] syzkaller0: entered promiscuous mode [ 165.037013][ T9798] tipc: Enabling of bearer rejected, failed to enable media [ 165.059752][ T5800] tipc: Node number set to 2886997039 [ 165.131536][ T9802] netlink: 'syz.1.1032': attribute type 1 has an invalid length. [ 165.206173][ T9801] __nla_validate_parse: 3 callbacks suppressed [ 165.206189][ T9801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1032'. [ 165.230326][ T9816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1035'. [ 165.259046][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1037'. [ 165.332880][ T9802] 8021q: adding VLAN 0 to HW filter on device bond5 [ 165.359677][ T9811] dummy0: left promiscuous mode [ 165.730968][ T8675] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 165.892171][ T9869] netlink: 'syz.1.1048': attribute type 32 has an invalid length. [ 165.908245][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1048'. [ 165.940897][ T9869] bond6: option coupled_control: invalid value (192) [ 165.952218][ T9869] bond6 (unregistering): Released all slaves [ 166.036947][ T9885] netlink: 182 bytes leftover after parsing attributes in process `syz.0.1051'. [ 166.170381][ T9889] syzkaller0: entered promiscuous mode [ 166.177284][ T9889] syzkaller0: entered allmulticast mode [ 166.222114][ T9889] erspan0: left promiscuous mode [ 166.248076][ T9896] netlink: 'syz.0.1052': attribute type 1 has an invalid length. [ 166.278071][ T9889] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.285732][ T9889] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.302223][ T9889] dummy0: left promiscuous mode [ 166.323416][ T9895] netem: incorrect ge model size [ 166.329287][ T9895] netem: change failed [ 166.350595][ T9838] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 166.489051][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1057'. [ 166.650629][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1061'. [ 167.152773][ T5753] net_ratelimit: 7 callbacks suppressed [ 167.152792][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.415188][ T9958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1075'. [ 167.937708][ T9989] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 167.949327][ T9989] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 168.177261][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.314724][T10011] bond3 (unregistering): Released all slaves [ 168.338736][ T5638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.482301][T10019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1088'. [ 168.579854][T10024] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1089'. [ 168.605427][T10024] netlink: 'syz.2.1089': attribute type 1 has an invalid length. [ 168.735022][T10039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.748155][T10041] netlink: 'syz.2.1094': attribute type 30 has an invalid length. [ 168.820145][T10041] bond3: option arp_missed_max: invalid value (0) [ 168.827269][T10041] bond3: option arp_missed_max: allowed values 1 - 255 [ 168.849091][T10041] bond3 (unregistering): Released all slaves [ 168.944731][ T24] IPVS: starting estimator thread 0... [ 169.046135][T10052] IPVS: using max 29 ests per chain, 69600 per kthread [ 169.215574][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.903704][T10057] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 169.915086][T10079] netlink: 'syz.2.1107': attribute type 1 has an invalid length. [ 170.072806][T10095] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 170.203706][T10106] netlink: 'syz.0.1115': attribute type 12 has an invalid length. [ 170.255625][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.296433][T10113] netlink: 'syz.3.1116': attribute type 28 has an invalid length. [ 170.305628][T10109] trusted_key: syz.0.1117 sent an empty control message without MSG_MORE. [ 170.326274][T10113] netlink: 'syz.3.1116': attribute type 3 has an invalid length. [ 170.338668][T10113] __nla_validate_parse: 7 callbacks suppressed [ 170.338682][T10113] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1116'. [ 170.369771][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'. [ 170.395008][T10114] netlink: 'syz.0.1117': attribute type 1 has an invalid length. [ 170.423901][T10114] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1117'. [ 170.493466][T10122] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1119'. [ 170.591595][T10130] netlink: 'syz.1.1121': attribute type 1 has an invalid length. [ 170.704970][T10130] 8021q: adding VLAN 0 to HW filter on device bond6 [ 170.860882][T10130] bond6: (slave geneve2): making interface the new active one [ 170.870176][T10130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.881222][T10130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.889718][T10130] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 170.936263][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.982233][ T8675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.086529][T10154] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1125'. [ 171.168157][T10158] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1126'. [ 171.282275][ T8684] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 171.324631][ T5753] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 171.334020][ T8684] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 171.576547][ T5753] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 171.644634][T10184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1132'. [ 171.666651][T10176] netlink: 'syz.1.1131': attribute type 1 has an invalid length. [ 171.674551][T10176] netlink: 'syz.1.1131': attribute type 1 has an invalid length. [ 171.683262][T10176] netlink: 9172 bytes leftover after parsing attributes in process `syz.1.1131'. [ 171.694691][T10176] netlink: 'syz.1.1131': attribute type 26 has an invalid length. [ 171.697516][T10185] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1134'. [ 171.885984][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 172.088671][T10213] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1136'. [ 172.303081][T10184] x_tables: unsorted underflow at hook 2 [ 172.354141][T10229] netlink: 'syz.2.1141': attribute type 11 has an invalid length. [ 172.401255][T10229] netlink: 'syz.2.1141': attribute type 11 has an invalid length. [ 173.638515][T10302] net_ratelimit: 5 callbacks suppressed [ 173.638532][T10302] openvswitch: netlink: nsh attribute has 5 unknown bytes. [ 174.149739][T10266] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 174.468420][T10339] netlink: 'syz.3.1169': attribute type 3 has an invalid length. [ 174.497272][T10339] netlink: 'syz.3.1169': attribute type 2 has an invalid length. [ 174.844970][T10364] Cannot find add_set index 4 as target [ 174.893027][T10366] openvswitch: netlink: Flow actions attr not present in new flow. [ 175.101441][T10380] sch_fq: defrate 0 ignored. [ 175.493483][T10389] bond3: invalid ARP target 0.0.0.0 specified for addition [ 175.501722][T10389] bond3: option arp_ip_target: invalid value (0) [ 175.518534][T10389] bond3 (unregistering): Released all slaves [ 175.535493][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 175.583240][T10390] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 175.648458][T10405] __nla_validate_parse: 10 callbacks suppressed [ 175.648476][T10405] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1185'. [ 175.661431][T10407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1187'. [ 175.703174][T10410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.754976][T10418] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1190'. [ 175.778486][T10417] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1189'. [ 175.794874][T10411] bond2: entered promiscuous mode [ 175.809271][T10411] bond2: entered allmulticast mode [ 175.990905][T10434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1192'. [ 176.013980][T10434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1192'. [ 176.220125][T10450] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1197'. [ 176.374665][T10451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1199'. [ 176.378310][T10457] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1201'. [ 176.550397][T10460] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1203'. [ 176.989133][T10500] xt_CONNSECMARK: invalid mode: 0 [ 176.996410][T10499] validate_nla: 1 callbacks suppressed [ 176.996424][T10499] netlink: 'syz.3.1211': attribute type 21 has an invalid length. [ 177.000117][T10500] xt_CONNSECMARK: invalid mode: 0 [ 177.021267][T10500] xt_CONNSECMARK: invalid mode: 0 [ 177.027426][T10500] xt_CONNSECMARK: invalid mode: 0 [ 177.032601][T10500] xt_CONNSECMARK: invalid mode: 0 [ 177.038209][T10500] xt_CONNSECMARK: invalid mode: 0 [ 177.043616][T10500] xt_CONNSECMARK: invalid mode: 0 [ 177.431423][T10528] syzkaller0: entered promiscuous mode [ 177.477623][T10526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.489636][T10528] syzkaller0: entered allmulticast mode [ 178.040124][T10562] netlink: 'syz.3.1223': attribute type 20 has an invalid length. [ 178.057299][T10562] IPv6: NLM_F_CREATE should be specified when creating new route [ 178.208824][T10566] netlink: 'syz.0.1224': attribute type 1 has an invalid length. [ 178.374256][T10571] pimreg3: entered allmulticast mode [ 178.702751][T10588] xt_hashlimit: size too large, truncated to 1048576 [ 178.767981][T10587] netlink: 'syz.2.1233': attribute type 14 has an invalid length. [ 179.361127][T10631] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 179.361127][T10631] Please contact the netfilter-devel mailing list or update your nftables rules. [ 179.399472][T10630] sctp: [Deprecated]: syz.1.1245 (pid 10630) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.399472][T10630] Use struct sctp_sack_info instead [ 179.834105][ T4951] Bluetooth: hci2: link tx timeout [ 179.840455][ T4951] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 181.856882][ T4951] Bluetooth: hci2: command 0x0405 tx timeout [ 182.506129][T10636] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 182.703683][T10671] __nla_validate_parse: 5 callbacks suppressed [ 182.703699][T10671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1255'. [ 182.722220][T10671] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1255'. [ 182.769194][T10676] xt_hashlimit: size too large, truncated to 1048576 [ 182.792662][T10678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1255'. [ 182.994311][T10685] netlink: 'syz.1.1259': attribute type 1 has an invalid length. [ 183.077753][T10685] 8021q: adding VLAN 0 to HW filter on device bond7 [ 183.121488][T10691] ip_vti0: entered promiscuous mode [ 183.229505][T10697] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1264'. [ 183.374293][T10706] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1265'. [ 183.411950][T10706] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1265'. [ 183.631993][T10725] netlink: 'syz.1.1274': attribute type 2 has an invalid length. [ 183.651637][T10725] netlink: 'syz.1.1274': attribute type 11 has an invalid length. [ 183.672563][T10725] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1274'. [ 183.697822][T10731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1275'. [ 183.788377][T10731] A link change request failed with some changes committed already. Interface t may have been left with an inconsistent configuration, please check. [ 183.855981][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 184.005753][T10731] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1275'. [ 184.179986][T10750] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1280'. [ 184.203820][T10748] syzkaller0: entered promiscuous mode [ 184.220746][T10748] syzkaller0: entered allmulticast mode [ 184.225516][T10750] Cannot find del_set index 3 as target [ 184.261685][T10748] tipc: Enabled bearer , priority 0 [ 184.454627][T10747] tipc: Resetting bearer [ 184.564935][T10747] tipc: Disabling bearer [ 184.623786][T10775] netlink: 'syz.2.1286': attribute type 1 has an invalid length. [ 184.755096][T10773] ip6gretap1: entered promiscuous mode [ 184.765474][T10773] ip6gretap1: entered allmulticast mode [ 184.774519][T10773] bond3: (slave ip6gretap1): making interface the new active one [ 184.783582][T10773] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 184.794753][T10773] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 184.802856][T10773] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 185.548116][T10819] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 185.585208][T10819] bond4 (unregistering): Released all slaves [ 186.061988][T10868] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 186.201224][T10870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.689499][T10903] xt_hashlimit: size too large, truncated to 1048576 [ 186.823348][T10906] netlink: 'syz.4.1322': attribute type 1 has an invalid length. [ 186.842997][T10906] netlink: 'syz.4.1322': attribute type 5 has an invalid length. [ 186.875047][T10906] geneve2: entered promiscuous mode [ 186.911902][T10906] geneve2: entered allmulticast mode [ 186.960460][ T8675] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 187.033106][ T8675] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 187.051441][ T8675] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 187.073220][ T8675] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 187.112388][T10917] veth0_macvtap: left promiscuous mode [ 187.338747][T10929] veth0_macvtap: entered allmulticast mode [ 187.367232][T10929] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 187.531036][T10941] team0 (unregistering): Port device team_slave_0 removed [ 187.587772][T10941] team0 (unregistering): Port device team_slave_1 removed [ 187.613851][T10941] team0 (unregistering): Port device dummy0 removed [ 187.839229][T10955] netlink: 'syz.0.1335': attribute type 11 has an invalid length. [ 187.847386][T10955] __nla_validate_parse: 17 callbacks suppressed [ 187.847401][T10955] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.1335'. [ 187.947243][T10963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.361934][T10986] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1341'. [ 188.586606][T11006] sctp: [Deprecated]: syz.0.1343 (pid 11006) Use of int in maxseg socket option. [ 188.586606][T11006] Use struct sctp_assoc_value instead [ 188.739852][T11008] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 188.756095][T11008] syzkaller1: linktype set to 823 [ 189.213870][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1351'. [ 189.761814][T11067] tunl0: entered promiscuous mode [ 189.767280][T11067] netlink: 'syz.2.1355': attribute type 3 has an invalid length. [ 189.775130][T11067] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1355'. [ 189.814505][T11069] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1357'. [ 189.999906][T11080] gre0: entered promiscuous mode [ 190.006880][T11080] erspan0: entered promiscuous mode [ 190.012515][T11080] ip_vti0: entered promiscuous mode [ 190.018279][ T5745] lo speed is unknown, defaulting to 1000 [ 190.028513][ T5745] syś2: Port: 1 Link DOWN [ 192.063475][T11033] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 192.391511][T11091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1361'. [ 192.483305][T11104] netlink: 'syz.0.1361': attribute type 32 has an invalid length. [ 192.503043][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1361'. [ 192.596136][T11104] bond3: Setting coupled_control to off (0) [ 192.653354][T11111] openvswitch: netlink: IP tunnel dst address not specified [ 192.941003][T11130] sctp: [Deprecated]: syz.2.1374 (pid 11130) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.941003][T11130] Use struct sctp_sack_info instead [ 192.967540][T11131] --map-set only usable from mangle table [ 193.153203][T11138] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1377'. [ 193.177471][T11140] Cannot find del_set index 4 as target [ 193.194864][T11142] Cannot find del_set index 4 as target [ 193.363389][T11140] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 193.434071][T11157] vxcan1: entered allmulticast mode [ 193.488559][T11162] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1382'. [ 193.525491][T11162] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1382'. [ 193.600768][T11162] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1382'. [ 193.735106][T11171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1385'. [ 193.797919][T11185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.917990][T11189] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1389'. [ 193.937370][T11189] netlink: 'syz.2.1389': attribute type 1 has an invalid length. [ 194.106299][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.113245][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.566798][T11227] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1396'. [ 194.588907][T11228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1396'. [ 194.847545][T11240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1400'. [ 194.881130][T11240] netlink: 'syz.0.1400': attribute type 7 has an invalid length. [ 194.937893][T11240] netlink: 'syz.0.1400': attribute type 8 has an invalid length. [ 194.979525][T11240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1400'. [ 195.079970][T11253] netlink: 'syz.3.1405': attribute type 178 has an invalid length. [ 195.813069][T11298] xt_policy: neither incoming nor outgoing policy selected [ 195.851146][T11300] vlan0: entered promiscuous mode [ 195.860781][T11300] gretap0: entered promiscuous mode [ 195.927623][T11304] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20001 [ 196.159941][T11320] IPv6: sit2: Disabled Multicast RS [ 196.239220][T11324] vlan0: entered promiscuous mode [ 196.340554][T11327] pim6reg1: entered promiscuous mode [ 196.363697][T11327] pim6reg1: entered allmulticast mode [ 196.438426][T11328] syzkaller0: entered promiscuous mode [ 196.450545][T11328] syzkaller0: entered allmulticast mode [ 196.731383][T11357] netlink: 'syz.1.1436': attribute type 1 has an invalid length. [ 196.792694][T11357] bond8: (slave geneve3): making interface the new active one [ 196.801227][T11357] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 196.818967][T11357] 8021q: adding VLAN 0 to HW filter on device bond8 [ 196.834521][ T3392] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 196.887484][ T3392] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 196.946434][T11364] tipc: Resetting bearer [ 197.017400][T11372] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 197.125051][ T8675] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 197.150108][ T5753] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 197.173400][ T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 197.283990][T11394] IPVS: length: 235 != 24 [ 198.032881][T11423] syzkaller0: entered promiscuous mode [ 198.088321][T11423] syzkaller0: entered allmulticast mode [ 198.110068][T11423] netlink: 'syz.2.1455': attribute type 1 has an invalid length. [ 198.136868][T11423] hsr_slave_0: left promiscuous mode [ 198.147377][T11423] hsr_slave_1: left promiscuous mode [ 198.176309][ T5753] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 198.188503][T11435] __nla_validate_parse: 20 callbacks suppressed [ 198.188519][T11435] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1455'. [ 198.307991][T11443] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1461'. [ 198.573383][T11459] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 198.617296][T11459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1465'. [ 198.654565][T11459] bond4: entered promiscuous mode [ 198.660339][T11459] 8021q: adding VLAN 0 to HW filter on device bond4 [ 198.722590][T11467] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1467'. [ 198.783010][T11473] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 198.963481][T11478] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1471'. [ 199.426354][T11502] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1479'. [ 199.443223][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1479'. [ 199.591422][T11518] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1486'. [ 199.659061][T11526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1487'. [ 199.782795][T11532] tipc: Enabled bearer , priority 11 [ 199.792448][T11532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.795831][T11526] netlink: 'syz.0.1487': attribute type 11 has an invalid length. [ 199.832098][T11526] syzkaller0: entered promiscuous mode [ 199.845706][T11526] syzkaller0: entered allmulticast mode [ 200.472410][T11572] netlink: 'syz.2.1501': attribute type 1 has an invalid length. [ 200.612976][T11579] IPVS: set_ctl: invalid protocol: 44 10.1.1.0:20002 [ 200.772519][T11591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1507'. [ 201.017298][T11593] xt_TPROXY: Can be used only with -p tcp or -p udp [ 201.038694][T11607] netlink: 'syz.0.1513': attribute type 1 has an invalid length. [ 201.135552][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 201.291561][T11621] netlink: 'syz.4.1517': attribute type 1 has an invalid length. [ 201.310645][ T5637] Bluetooth: hci0: command 0x0406 tx timeout [ 201.317284][ T5637] Bluetooth: hci1: command 0x0406 tx timeout [ 201.323331][ T5649] Bluetooth: hci4: command 0x0406 tx timeout [ 201.329983][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 201.331525][T11621] netlink: 'syz.4.1517': attribute type 1 has an invalid length. [ 201.379350][T11619] bond0: option miimon: invalid value (18446744071829782528) [ 201.392976][T11619] bond0: option miimon: allowed values 0 - 2147483647 [ 201.618375][T11627] syzkaller0: entered promiscuous mode [ 201.646457][T11627] syzkaller0: entered allmulticast mode [ 202.004674][T11650] nbd: illegal input index 2958377 [ 202.174565][T11661] netlink: 'syz.3.1531': attribute type 4 has an invalid length. [ 202.194687][T11661] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 202.206482][T11661] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 202.334604][T11661] syzkaller0: mtu less than device minimum [ 202.342215][ T1124] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 202.352647][ T1124] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 202.366874][ T5800] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 202.811333][T11697] team1: entered promiscuous mode [ 202.817599][T11697] team1: entered allmulticast mode [ 203.212278][T11726] __nla_validate_parse: 40 callbacks suppressed [ 203.212295][T11726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1545'. [ 203.236021][ T5753] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 203.361909][T11736] pim6reg527: entered allmulticast mode [ 203.380604][ T5753] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 203.517552][T11744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1552'. [ 203.622530][T11744] bond4: entered promiscuous mode [ 203.632486][T11750] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1555'. [ 203.650115][T11744] 8021q: adding VLAN 0 to HW filter on device bond4 [ 203.669835][T11751] x_tables: duplicate underflow at hook 3 [ 203.734309][T11748] 8021q: adding VLAN 0 to HW filter on device bond4 [ 203.741338][T11748] bond4: (slave sit3): The slave device specified does not support setting the MAC address [ 203.752827][T11748] bond4: (slave sit3): Error -95 calling set_mac_address [ 203.998763][T11777] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 204.064958][T11777] netlink: 'syz.0.1561': attribute type 58 has an invalid length. [ 204.073003][T11777] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1561'. [ 204.596077][T11782] bond5: option lp_interval: invalid value (0) [ 204.602430][T11782] bond5: option lp_interval: allowed values 1 - 2147483647 [ 204.610908][T11782] bond5 (unregistering): Released all slaves [ 205.963358][T11709] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 206.422119][T11828] x_tables: duplicate underflow at hook 3 [ 206.487963][T11831] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1577'. [ 206.497423][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.588936][T11834] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1578'. [ 206.620893][T11823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1572'. [ 206.766092][T11829] netlink: 'syz.0.1572': attribute type 10 has an invalid length. [ 206.827632][T11816] bridge2: port 1(dummy0) entered blocking state [ 206.848920][T11829] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1572'. [ 206.918327][T11816] bridge2: port 1(dummy0) entered disabled state [ 206.958063][T11816] dummy0: entered allmulticast mode [ 206.978583][T11816] dummy0: entered promiscuous mode [ 207.036504][T11829] bridge2: port 1(dummy0) entered blocking state [ 207.043645][T11829] bridge2: port 1(dummy0) entered forwarding state [ 207.087419][T11829] dummy0: left allmulticast mode [ 207.101499][T11829] bridge2: port 1(dummy0) entered disabled state [ 207.721871][T11889] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1593'. [ 207.827778][T11892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1594'. [ 209.335945][T11898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1596'. [ 209.567415][T11906] xt_connbytes: Forcing CT accounting to be enabled [ 209.852363][T11930] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1605'. [ 210.131379][T11933] gretap1: entered promiscuous mode [ 210.154455][T11933] batman_adv: batadv0: Adding interface: gretap1 [ 210.175967][T11933] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 210.223608][T11933] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 210.294883][T11938] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1608'. [ 210.421466][T11950] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1611'. [ 210.449840][T11953] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1612'. [ 210.460481][T11953] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1612'. [ 210.487667][T11953] netlink: 'syz.3.1612': attribute type 5 has an invalid length. [ 210.508877][T11953] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1612'. [ 210.776965][T11966] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1617'. [ 210.991092][T11978] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1623'. [ 210.997599][T11979] tipc: Enabling of bearer rejected, failed to enable media [ 211.024546][T11980] atomic_op ffff88807fc2e198 conn xmit_atomic 0000000000000000 [ 211.087324][T11974] can: request_module (can-proto-3) failed. [ 211.283469][T11999] netlink: 'syz.1.1627': attribute type 1 has an invalid length. [ 211.338922][T12001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1631'. [ 211.388082][T12008] xt_CT: You must specify a L4 protocol and not use inversions on it [ 211.395971][T11999] bond9: entered promiscuous mode [ 211.401668][T11999] 8021q: adding VLAN 0 to HW filter on device bond9 [ 211.487393][T11991] 8021q: adding VLAN 0 to HW filter on device bond9 [ 211.523487][T11991] bond9: (slave vti0): The slave device specified does not support setting the MAC address [ 211.552285][T11991] bond9: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 211.576581][T11991] bond9: (slave vti0): making interface the new active one [ 211.586478][T11991] vti0: entered promiscuous mode [ 211.593516][T11991] bond9: (slave vti0): Enslaving as an active interface with an up link [ 211.602120][T12008] veth0: entered promiscuous mode [ 211.614240][T12007] veth0: left promiscuous mode [ 211.631730][T12009] syzkaller0: entered promiscuous mode [ 211.640094][T12009] syzkaller0: entered allmulticast mode [ 212.029636][ T8692] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.069822][ T8692] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.118163][ T8692] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.151079][ T8692] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.690370][T12076] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.698394][T12076] bridge0: port 2(bridge_slave_1) entered listening state [ 212.729266][T12076] bridge0: entered promiscuous mode [ 212.747267][T12076] bridge0: entered allmulticast mode [ 214.232715][T12123] openvswitch: netlink: Multiple metadata blocks provided [ 214.590058][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 215.540669][T12082] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 216.050499][T12158] __nla_validate_parse: 12 callbacks suppressed [ 216.050516][T12158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1676'. [ 216.118790][T12163] netlink: 'syz.3.1677': attribute type 1 has an invalid length. [ 216.132404][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1677'. [ 216.133441][T12133] nbd1: detected capacity change from 0 to 63 [ 216.143982][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1677'. [ 216.149825][T12147] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1670'. [ 216.160027][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1677'. [ 216.182529][ T4951] block nbd1: Receive control failed (result -32) [ 216.186587][ T5650] block nbd1: Receive control failed (result -32) [ 216.212953][T12134] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1670'. [ 216.225964][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1677'. [ 216.240819][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1677'. [ 216.260626][ T5635] block nbd1: Dead connection, failed to find a fallback [ 216.278056][ T5635] block nbd1: shutting down sockets [ 216.289069][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1677'. [ 216.296137][ T5635] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.299062][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1677'. [ 216.317512][T12163] bond5: entered promiscuous mode [ 216.324379][ T5635] Buffer I/O error on dev nbd1, logical block 0, async page read [ 216.333921][ T5635] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.343625][ T5635] Buffer I/O error on dev nbd1, logical block 1, async page read [ 216.351981][T12163] 8021q: adding VLAN 0 to HW filter on device bond5 [ 216.359223][ T5635] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.378966][ T5635] Buffer I/O error on dev nbd1, logical block 2, async page read [ 216.398906][ T5635] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.410972][ T5635] Buffer I/O error on dev nbd1, logical block 3, async page read [ 216.438774][T12165] 8021q: adding VLAN 0 to HW filter on device bond5 [ 216.452924][ T5635] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.466350][ T5635] Buffer I/O error on dev nbd1, logical block 0, async page read [ 216.468134][T12165] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 216.474349][ T5635] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.499474][ T5635] Buffer I/O error on dev nbd1, logical block 1, async page read [ 216.509192][ T5635] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.516685][T12165] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 216.527111][ T5635] Buffer I/O error on dev nbd1, logical block 2, async page read [ 216.541220][ T5635] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.567444][ T5635] Buffer I/O error on dev nbd1, logical block 3, async page read [ 216.594972][T12165] bond5: (slave ip6gre1): making interface the new active one [ 216.637066][T12165] ip6gre1: entered promiscuous mode [ 216.639206][ T5635] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.663698][T12165] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 216.670808][ T5635] Buffer I/O error on dev nbd1, logical block 0, async page read [ 216.696809][ T5635] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.717257][ T5635] Buffer I/O error on dev nbd1, logical block 1, async page read [ 216.753799][ T5635] ldm_validate_partition_table(): Disk read failed. [ 216.801731][ T5635] Dev nbd1: unable to read RDB block 0 [ 216.814023][ T5635] nbd1: unable to read partition table [ 216.830564][ T5635] ldm_validate_partition_table(): Disk read failed. [ 216.848380][ T5635] Dev nbd1: unable to read RDB block 0 [ 216.879189][ T5635] nbd1: unable to read partition table [ 216.997262][T12194] netlink: 'syz.0.1686': attribute type 62 has an invalid length. [ 217.138864][T12200] netlink: 'syz.2.1690': attribute type 1 has an invalid length. [ 217.543035][T12221] syzkaller0: entered promiscuous mode [ 217.564252][T12221] syzkaller0: entered allmulticast mode [ 217.588823][T12221] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 217.998595][T12245] xt_hashlimit: size too large, truncated to 1048576 [ 218.084456][T12247] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.134518][T12247] bridge_slave_0 (unregistering): left allmulticast mode [ 218.176400][T12247] bridge_slave_0 (unregistering): left promiscuous mode [ 218.191745][T12247] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.744850][T12281] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 218.927789][T12290] IPv6: sit1: Disabled Multicast RS [ 218.939393][T12294] xt_hashlimit: size too large, truncated to 1048576 [ 218.945872][T12290] sit1: entered allmulticast mode [ 219.203884][T12298] syzkaller1: entered promiscuous mode [ 219.216660][T12298] syzkaller1: entered allmulticast mode [ 219.258090][T12310] netlink: 'syz.0.1724': attribute type 13 has an invalid length. [ 219.423881][T12321] xfrm1: entered promiscuous mode [ 219.447058][T12321] xfrm1: entered allmulticast mode [ 219.510152][T12326] netlink: 'syz.1.1728': attribute type 1 has an invalid length. [ 219.776598][T12337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.864586][T12345] netlink: 'syz.4.1735': attribute type 23 has an invalid length. [ 219.921376][T12342] IPVS: set_ctl: invalid protocol: 44 100.1.1.2:20004 [ 220.324004][T12370] tipc: Enabled bearer , priority 28 [ 220.524516][T12384] netlink: 'syz.0.1747': attribute type 1 has an invalid length. [ 220.603853][T12388] netlink: 'syz.4.1750': attribute type 1 has an invalid length. [ 220.644479][T12384] 8021q: adding VLAN 0 to HW filter on device bond5 [ 220.671923][T12391] netlink: 'syz.2.1749': attribute type 16 has an invalid length. [ 220.688024][T12391] netlink: 'syz.2.1749': attribute type 3 has an invalid length. [ 220.796227][T12392] vlan2: entered promiscuous mode [ 220.824167][T12392] bond5: entered promiscuous mode [ 220.849567][T12392] vlan2: entered allmulticast mode [ 220.868876][T12392] bond5: entered allmulticast mode [ 220.951746][T12384] bond5: (slave bridge3): making interface the new active one [ 220.972953][T12384] bridge3: entered promiscuous mode [ 221.007977][T12384] bridge3: entered allmulticast mode [ 221.030072][T12384] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 221.063407][T12401] macvlan2: entered promiscuous mode [ 221.072545][T12401] macvlan2: entered allmulticast mode [ 221.080967][T12401] bond3: entered promiscuous mode [ 221.087469][T12401] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 221.103948][T12401] bond3: left promiscuous mode [ 221.291639][T12431] __nla_validate_parse: 69 callbacks suppressed [ 221.291657][T12431] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1757'. [ 221.317581][T12431] openvswitch: netlink: Flow key attr not present in new flow. [ 221.437661][T12436] syzkaller0: entered promiscuous mode [ 221.455222][T12436] syzkaller0: entered allmulticast mode [ 222.028765][T12471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1766'. [ 222.159422][T12471] team2: entered promiscuous mode [ 222.186004][T12471] team2: entered allmulticast mode [ 222.637654][T12492] netlink: 2760 bytes leftover after parsing attributes in process `syz.2.1772'. [ 222.654062][T12492] openvswitch: netlink: Flow key attr not present in new flow. [ 222.701824][T12506] lo speed is unknown, defaulting to 1000 [ 222.720490][T12506] lo speed is unknown, defaulting to 1000 [ 222.779377][T12508] syz.3.1775 (12508) used greatest stack depth: 18088 bytes left [ 223.202782][T12532] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1783'. [ 223.280479][T12535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1784'. [ 223.576488][T12546] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 223.652387][T12552] macvlan2: entered promiscuous mode [ 223.664603][T12552] macvlan2: entered allmulticast mode [ 223.679163][T12552] bond6: (slave macvlan2): Error -98 calling set_mac_address [ 223.688955][T12563] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1789'. [ 223.699898][T12563] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1789'. [ 223.723349][T12563] netlink: 'syz.1.1789': attribute type 5 has an invalid length. [ 223.732550][T12563] netlink: 'syz.1.1789': attribute type 6 has an invalid length. [ 223.742063][T12563] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1789'. [ 223.782717][T12569] SET target dimension over the limit! [ 224.271722][T12594] netlink: 'syz.3.1798': attribute type 8 has an invalid length. [ 224.297961][T12594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1798'. [ 224.309411][T12594] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.413547][T12598] netlink: 'syz.0.1799': attribute type 1 has an invalid length. [ 224.697082][T12598] 8021q: adding VLAN 0 to HW filter on device bond6 [ 225.026678][T12632] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.411018][T12657] syzkaller0: entered promiscuous mode [ 225.420560][T12657] syzkaller0: entered allmulticast mode [ 225.430010][T12657] tipc: Started in network mode [ 225.434966][T12657] tipc: Node identity f69dcc21eec8, cluster identity 4711 [ 225.443940][T12657] tipc: Enabled bearer , priority 0 [ 225.487846][T12657] tipc: Resetting bearer [ 225.557588][T12656] tipc: Resetting bearer [ 225.600504][T12656] tipc: Disabling bearer [ 225.968462][T12686] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1820'. [ 226.072180][T12688] netlink: 'syz.1.1819': attribute type 8 has an invalid length. [ 226.410176][T12709] netlink: 'syz.4.1827': attribute type 11 has an invalid length. [ 226.822947][T12732] sctp: [Deprecated]: syz.0.1833 (pid 12732) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.822947][T12732] Use struct sctp_sack_info instead [ 227.670251][T12772] __nla_validate_parse: 2 callbacks suppressed [ 227.670266][T12772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1845'. [ 227.933973][T12793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1848'. [ 227.964446][T12772] bond5: entered promiscuous mode [ 227.973099][T12772] 8021q: adding VLAN 0 to HW filter on device bond5 [ 227.983247][T12793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1848'. [ 228.016222][T12783] lo: entered promiscuous mode [ 228.036856][T12794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1849'. [ 228.046220][T12783] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.534098][T12825] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1855'. [ 228.547747][T12825] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 228.590334][T12826] bond6: option all_slaves_active: invalid value (222) [ 228.600044][T12826] bond6 (unregistering): Released all slaves [ 228.669997][T12835] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode [ 228.699732][T12835] batman_adv: batadv0: Adding interface: wlan0 [ 228.719195][T12835] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.750101][T12835] batman_adv: batadv0: Interface activated: wlan0 [ 229.134541][T12860] netlink: 'syz.3.1864': attribute type 11 has an invalid length. [ 229.170611][T12860] netlink: 'syz.3.1864': attribute type 11 has an invalid length. [ 229.178130][T12842] syzkaller0: entered promiscuous mode [ 229.184036][T12842] syzkaller0: entered allmulticast mode [ 229.184816][T12860] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1864'. [ 229.288457][T12873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1869'. [ 229.428188][T12879] Cannot find del_set index 3 as target [ 230.927485][T12879] veth1_macvtap: left promiscuous mode [ 230.938469][T12879] macsec0: entered promiscuous mode [ 230.954574][T12879] macsec0: entered allmulticast mode [ 230.978640][T12880] veth1_macvtap: entered promiscuous mode [ 231.007421][T12880] veth1_macvtap: entered allmulticast mode [ 231.046329][T12880] macsec0: left promiscuous mode [ 231.060746][T12880] macsec0: left allmulticast mode [ 231.081237][T12880] veth1_macvtap: left allmulticast mode [ 231.169997][T12895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.430583][T12913] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1877'. [ 231.474089][T12913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1877'. [ 231.478747][T12919] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 231.495632][T12919] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 231.728463][T12929] netlink: 'syz.2.1882': attribute type 29 has an invalid length. [ 231.761713][T12929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1882'. [ 231.855521][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 231.934760][T12937] bond10: entered promiscuous mode [ 231.947772][T12937] bond10: entered allmulticast mode [ 231.954595][T12937] 8021q: adding VLAN 0 to HW filter on device bond10 [ 231.963547][T12942] ve: renamed from veth0_vlan (while UP) [ 232.169423][T12962] netlink: 'syz.3.1891': attribute type 1 has an invalid length. [ 232.208242][T12962] bond7: entered promiscuous mode [ 232.213648][T12962] 8021q: adding VLAN 0 to HW filter on device bond7 [ 232.397071][T12974] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20000 [ 232.693433][T12987] __nla_validate_parse: 4 callbacks suppressed [ 232.693453][T12987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1900'. [ 232.726030][T12987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1900'. [ 232.852004][T12996] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1902'. [ 233.257512][T13009] A link change request failed with some changes committed already. Interface t may have been left with an inconsistent configuration, please check. [ 233.297572][T13010] A link change request failed with some changes committed already. Interface t may have been left with an inconsistent configuration, please check. [ 234.415563][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 234.803946][T12941] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 234.814591][T12955] netlink: 'syz.0.1886': attribute type 1 has an invalid length. [ 234.823443][T12955] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1886'. [ 234.860383][T12957] netlink: 'syz.0.1886': attribute type 2 has an invalid length. [ 234.877184][T12957] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1886'. [ 235.133287][T13026] netlink: 'syz.4.1912': attribute type 1 has an invalid length. [ 235.224325][T13031] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1911'. [ 235.273850][T13026] bond4: entered promiscuous mode [ 235.280270][T13026] 8021q: adding VLAN 0 to HW filter on device bond4 [ 235.325396][T13026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1912'. [ 235.353503][T13026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1912'. [ 235.398404][T13026] bond4: (slave bridge3): making interface the new active one [ 235.409716][T13026] bridge3: entered promiscuous mode [ 235.428695][T13026] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 235.502520][T13034] geneve4: entered promiscuous mode [ 235.507992][T13034] geneve4: entered allmulticast mode [ 235.514950][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 235.531778][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 235.567588][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 235.590284][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 235.598655][T13038] xt_hashlimit: size too large, truncated to 1048576 [ 236.064894][T13058] 8021q: VLANs not supported on wg0 [ 236.377064][T13064] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1924'. [ 236.659375][T13081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1930'. [ 236.741077][T13080] bond5: entered promiscuous mode [ 236.747307][T13080] bond5: entered allmulticast mode [ 236.752854][T13080] 8021q: adding VLAN 0 to HW filter on device bond5 [ 236.845167][T13097] lo: Caught tx_queue_len zero misconfig [ 236.905086][T13105] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 236.952079][T13107] netlink: 'syz.3.1937': attribute type 9 has an invalid length. [ 237.520881][T13139] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 237.635974][T13145] netlink: 'syz.4.1948': attribute type 1 has an invalid length. [ 237.677511][T13145] bond6: entered promiscuous mode [ 237.683082][T13145] 8021q: adding VLAN 0 to HW filter on device bond6 [ 237.779714][T13145] bond6: (slave bridge4): making interface the new active one [ 237.787643][T13145] bridge4: entered promiscuous mode [ 237.793976][T13145] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 238.314507][T13183] __nla_validate_parse: 3 callbacks suppressed [ 238.314520][T13183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1958'. [ 240.103768][T13119] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 240.272280][T13192] : renamed from bond0 (while UP) [ 240.298895][T13192] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1962'. [ 240.388546][T13199] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1962'. [ 240.480833][T13206] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1964'. [ 240.543295][T13206] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1964'. [ 241.339102][T13253] netem: change failed [ 241.523048][T13264] netlink: 'syz.3.1971': attribute type 2 has an invalid length. [ 241.566003][T13264] netlink: 'syz.3.1971': attribute type 1 has an invalid length. [ 241.658369][T13272] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1974'. [ 241.698402][T13272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1974'. [ 242.187191][T13293] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1977'. [ 244.049900][T13250] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 244.531777][T13322] bridge_slave_0 (unregistering): left allmulticast mode [ 244.548055][T13322] bridge_slave_0 (unregistering): left promiscuous mode [ 244.566220][T13322] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.103633][T13302] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 245.384659][T13360] netlink: 'syz.4.1989': attribute type 23 has an invalid length. [ 245.509370][T13373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1994'. [ 245.893835][T13392] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1999'. [ 245.911707][T13392] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 246.030328][ T4951] Bluetooth: hci2: link tx timeout [ 246.035560][ T4951] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 248.095559][ T4951] Bluetooth: hci2: command 0x0405 tx timeout [ 248.324624][T13362] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 248.802551][T13434] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2006'. [ 248.844349][T13436] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2008'. [ 248.928405][T13447] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2006'. [ 248.949205][T13446] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2010'. [ 248.969693][T13449] macsec0: entered allmulticast mode [ 248.994045][T13449] veth1_macvtap: entered allmulticast mode [ 249.005415][T13446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2010'. [ 249.080887][T13446] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2010'. [ 249.196600][T13458] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2012'. [ 249.239751][T13463] netlink: 'syz.2.2014': attribute type 16 has an invalid length. [ 249.252517][T13458] x_tables: duplicate underflow at hook 1 [ 249.288523][T13463] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2014'. [ 249.331355][T13463] veth0_macvtap: entered allmulticast mode [ 249.953471][T13501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.638803][T13538] netlink: 'syz.3.2033': attribute type 1 has an invalid length. [ 250.673421][T13538] netlink: 'syz.3.2033': attribute type 1 has an invalid length. [ 250.773425][T13540] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 255.536556][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.542894][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.415431][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 274.666407][T13638] __nla_validate_parse: 3 callbacks suppressed [ 274.666425][T13638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2045'. [ 274.698903][ T8684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.722924][T13645] netlink: 276 bytes leftover after parsing attributes in process `syz.0.2047'. [ 274.733911][ T8684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.735085][T13646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.761857][T13645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2047'. [ 274.809630][T13638] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2045'. [ 275.279684][T13672] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20003 [ 275.491619][T13691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.684857][T13694] syzkaller0: entered promiscuous mode [ 275.699071][T13694] syzkaller0: entered allmulticast mode [ 275.770337][T13713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2063'. [ 277.816473][T13739] netlink: 'syz.2.2070': attribute type 1 has an invalid length. [ 277.982803][T13739] 8021q: adding VLAN 0 to HW filter on device bond6 [ 278.083958][T13743] bond6: (slave ip6erspan1): making interface the new active one [ 278.106416][T13743] bond6: (slave ip6erspan1): Enslaving as an active interface with an up link [ 278.146165][T13748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.182800][T13753] ip6tnl0: Caught tx_queue_len zero misconfig [ 278.229022][T13759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2073'. [ 278.291773][T13759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.329344][T13759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.348734][T13761] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2077'. [ 278.440956][T13764] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2078'. [ 278.504595][T13766] netlink: 'syz.0.2079': attribute type 9 has an invalid length. [ 278.620930][T13766] lo: left promiscuous mode [ 278.631669][T13766] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.716413][T13766] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2079'. [ 278.924213][T13789] netlink: 'syz.1.2085': attribute type 1 has an invalid length. [ 278.933215][T13789] netlink: 'syz.1.2085': attribute type 11 has an invalid length. [ 278.943669][T13789] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2085'. [ 279.103056][T13796] ip_vti0: left promiscuous mode [ 279.130341][T13796] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 279.141123][T13796] bridge1: left promiscuous mode [ 279.154770][T13796] bridge1: left allmulticast mode [ 279.168607][T13796] hsr1: left promiscuous mode [ 279.179461][T13796] vlan0: left promiscuous mode [ 279.184270][T13796] gretap0: left promiscuous mode [ 279.192367][T13796] bond9: left promiscuous mode [ 279.199654][T13796] vti0: left promiscuous mode [ 279.207953][T13796] bond10: left promiscuous mode [ 279.212868][T13796] bond10: left allmulticast mode [ 279.218742][ T5800] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 279.324759][T13801] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 280.096096][ T5800] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 281.673911][T13775] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 281.918990][T13813] __nla_validate_parse: 1 callbacks suppressed [ 281.919010][T13813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2094'. [ 281.959025][T13817] lo: entered promiscuous mode [ 281.989198][T13817] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 282.010695][T13823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2098'. [ 282.022430][T13825] netlink: 'syz.4.2096': attribute type 23 has an invalid length. [ 282.023901][T13823] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2098'. [ 282.138228][T13832] netlink: 'syz.2.2100': attribute type 1 has an invalid length. [ 282.146324][T13832] netlink: 'syz.2.2100': attribute type 1 has an invalid length. [ 282.154149][T13832] netlink: 'syz.2.2100': attribute type 1 has an invalid length. [ 282.162475][T13832] netlink: 'syz.2.2100': attribute type 2 has an invalid length. [ 282.170731][T13832] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2100'. [ 282.190264][T13822] bond10: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 282.202974][T13822] bond10 (unregistering): Released all slaves [ 282.787652][T13859] netlink: 'syz.3.2108': attribute type 11 has an invalid length. [ 282.811379][T13861] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2110'. [ 282.812959][T13859] netlink: 199788 bytes leftover after parsing attributes in process `syz.3.2108'. [ 283.107630][T13872] syzkaller0: entered promiscuous mode [ 283.124429][T13872] syzkaller0: entered allmulticast mode [ 283.151381][T13872] netlink: 996 bytes leftover after parsing attributes in process `syz.2.2112'. [ 283.170792][T13881] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2114'. [ 283.184145][T13881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.221372][T13881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.234934][T13881] bond0 (unregistering): Released all slaves [ 283.413609][T13896] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 283.428606][T13896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.002609][T13926] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2127'. [ 284.053472][T13926] IPv6: NLM_F_CREATE should be specified when creating new route [ 284.451412][T13946] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2133'. [ 284.931679][ T30] audit: type=1800 audit(1781515928.562:4): pid=13965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2139" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2264 res=0 errno=0 [ 285.648493][T14008] syzkaller0: entered promiscuous mode [ 285.663067][T14008] syzkaller0: entered allmulticast mode [ 285.790734][T14014] netlink: 'syz.4.2154': attribute type 1 has an invalid length. [ 285.860947][T14021] netlink: 'syz.1.2157': attribute type 1 has an invalid length. [ 285.883749][T14021] netlink: 'syz.1.2157': attribute type 3 has an invalid length. [ 285.897416][T14014] bond0: entered promiscuous mode [ 285.916703][T14014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.001564][T14033] bond0: (slave bridge5): making interface the new active one [ 286.024960][T14033] bridge5: entered promiscuous mode [ 286.032737][T14033] bond0: (slave bridge5): Enslaving as an active interface with an up link [ 286.159754][T14041] macsec1: entered promiscuous mode [ 286.176021][T14041] bond0: entered promiscuous mode [ 286.186477][T14041] bond_slave_0: entered promiscuous mode [ 286.202449][T14041] bond_slave_1: entered promiscuous mode [ 286.229447][T14041] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 286.261686][T14041] bond0: left promiscuous mode [ 286.300873][T14049] netlink: zone id is out of range [ 286.308801][T14049] netlink: zone id is out of range [ 286.314245][ T5638] bond_slave_0: left promiscuous mode [ 286.314285][T14049] netlink: zone id is out of range [ 286.321334][T14049] netlink: zone id is out of range [ 286.326320][ T5638] bond_slave_1: left promiscuous mode [ 286.341119][T14049] netlink: zone id is out of range [ 286.348693][T14049] netlink: zone id is out of range [ 286.354130][T14049] netlink: zone id is out of range [ 286.363147][T14049] netlink: zone id is out of range [ 286.478959][T14053] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 286.488125][T14053] IPv6: NLM_F_CREATE should be set when creating new route [ 286.495436][T14053] IPv6: NLM_F_CREATE should be set when creating new route [ 286.729768][T14064] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 286.741772][T14064] batman_adv: batadv0: Adding interface: bridge6 [ 286.749029][T14064] batman_adv: batadv0: The MTU of interface bridge6 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.797137][T14064] batman_adv: batadv0: Not using interface bridge6 (retrying later): interface not active [ 286.888596][T14070] netlink: 'syz.0.2169': attribute type 1 has an invalid length. [ 286.979961][T14070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.998837][T14075] vlan3: entered promiscuous mode [ 287.004160][T14075] bond0: entered promiscuous mode [ 287.010063][T14075] vlan3: entered allmulticast mode [ 287.016481][T14075] bond0: entered allmulticast mode [ 287.083788][T14070] bond0: (slave bridge4): making interface the new active one [ 287.100564][T14070] bridge4: entered promiscuous mode [ 287.123248][T14070] bridge4: entered allmulticast mode [ 287.171451][T14070] bond0: (slave bridge4): Enslaving as an active interface with an up link [ 289.440607][T14053] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 289.659247][T14093] ip6t_REJECT: ECHOREPLY is not supported [ 289.683336][T14093] __nla_validate_parse: 8 callbacks suppressed [ 289.683351][T14093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2175'. [ 289.794245][T14110] netlink: 'syz.3.2179': attribute type 1 has an invalid length. [ 289.823937][T14093] vlan4: entered allmulticast mode [ 289.846620][T14093] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 290.227052][T14137] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 290.278501][T14137] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma? [ 290.305194][T14143] net_ratelimit: 75 callbacks suppressed [ 290.305213][T14143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.408760][T14143] netlink: 'syz.4.2187': attribute type 10 has an invalid length. [ 290.471671][T14143] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 290.502846][T14143] : (slave netdevsim1): Enslaving as an active interface with an up link [ 290.681225][T14162] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2193'. [ 290.882084][T14172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2195'. [ 290.963526][T14175] netlink: 'syz.2.2196': attribute type 3 has an invalid length. [ 290.976353][T14175] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2196'. [ 291.016273][T14176] netlink: 'syz.2.2196': attribute type 3 has an invalid length. [ 291.039813][T14176] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2196'. [ 291.059268][T14178] netlink: 'syz.1.2197': attribute type 1 has an invalid length. [ 291.143688][T14181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2197'. [ 291.148097][T14178] bond11: entered promiscuous mode [ 291.158900][T14178] 8021q: adding VLAN 0 to HW filter on device bond11 [ 291.168000][T14181] bond11: entered allmulticast mode [ 291.233333][T14178] bond11: (slave bridge10): making interface the new active one [ 291.241834][T14178] bridge10: entered promiscuous mode [ 291.250244][T14178] bridge10: entered allmulticast mode [ 291.276929][T14178] bond11: (slave bridge10): Enslaving as an active interface with an up link [ 291.300959][T14191] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2200'. [ 291.328213][T14194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2201'. [ 291.337535][T14191] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2200'. [ 291.375225][T14195] IPVS: set_ctl: invalid protocol: 4 172.20.20.22:21 [ 291.394774][T14181] 8021q: adding VLAN 0 to HW filter on device bond12 [ 291.431584][T14190] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 291.441532][T14190] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 291.666745][T14208] tipc: Enabled bearer , priority 0 [ 291.702450][T14208] syzkaller0: entered promiscuous mode [ 291.730401][T14208] syzkaller0: entered allmulticast mode [ 291.784530][T14216] tipc: Resetting bearer [ 291.833524][T14207] tipc: Resetting bearer [ 291.874044][T14222] netlink: 'syz.1.2211': attribute type 1 has an invalid length. [ 291.886547][T14222] netlink: 704 bytes leftover after parsing attributes in process `syz.1.2211'. [ 291.896186][T14223] netlink: 'syz.1.2211': attribute type 1 has an invalid length. [ 291.907016][T14207] tipc: Disabling bearer [ 292.227782][T14241] openvswitch: netlink: IPv4 tunnel dst address is zero [ 292.415915][T14246] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 292.481720][T14251] netlink: 'syz.4.2222': attribute type 1 has an invalid length. [ 292.712360][T14267] xt_hashlimit: size too large, truncated to 1048576 [ 293.099072][T14284] syzkaller0: entered allmulticast mode [ 293.700097][ T30] audit: type=1804 audit(1781515937.332:5): pid=14318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2242" name="/newroot/499/cgroup.controllers" dev="tmpfs" ino=2555 res=1 errno=0 [ 293.750830][ T30] audit: type=1800 audit(1781515937.332:6): pid=14318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2242" name="cgroup.controllers" dev="tmpfs" ino=2555 res=0 errno=0 [ 294.188025][T14336] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.227784][ T8693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.241893][ T8693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.291696][T14342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.466300][T14363] netlink: 'syz.3.2257': attribute type 1 has an invalid length. [ 294.689088][T14373] __nla_validate_parse: 72 callbacks suppressed [ 294.689106][T14373] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2260'. [ 294.712308][T14379] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2257'. [ 294.721777][T14373] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2260'. [ 294.762230][T14373] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2260'. [ 295.010756][T14387] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2263'. [ 296.812717][T14404] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2268'. [ 296.911512][T14412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2271'. [ 296.956921][T14416] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 297.174840][T14423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2276'. [ 297.188828][T14423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2276'. [ 297.212531][T14425] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2277'. [ 297.397008][T14445] xt_l2tp: missing protocol rule (udp|l2tpip) [ 297.452467][T14448] bridge_slave_1: left allmulticast mode [ 297.467140][T14448] bridge_slave_1: left promiscuous mode [ 297.483566][T14448] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.525991][T14448] bridge_slave_0: left allmulticast mode [ 297.539467][T14448] bridge_slave_0: left promiscuous mode [ 297.551997][T14448] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.694579][T14464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.206373][T14486] openvswitch: netlink: Flow actions attr not present in new flow. [ 298.621765][T14506] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 298.655072][T14506] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 298.684540][T14508] netlink: 'syz.2.2298': attribute type 3 has an invalid length. [ 299.216775][T14539] ksmbd: Unknown IPC event: 3, ignore. [ 299.242593][T14539] ksmbd: Unknown IPC event: 3, ignore. [ 299.486916][T14554] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 299.874295][T14576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.976106][T14578] Bluetooth: MGMT ver 1.23 [ 300.015392][ T4951] Bluetooth: hci0: command 0x0406 tx timeout [ 300.165000][T14591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.209333][T14591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.241148][T14596] __nla_validate_parse: 13 callbacks suppressed [ 300.241160][T14596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2320'. [ 300.389942][T14608] bond0: Error: CAN devices cannot be enslaved [ 300.625665][T14618] netlink: 'syz.4.2325': attribute type 1 has an invalid length. [ 300.654334][T14618] netlink: 476 bytes leftover after parsing attributes in process `syz.4.2325'. [ 300.688733][T14618] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.2325'. [ 301.616798][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 302.025907][ T5650] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 302.032736][ T4951] Bluetooth: hci2: command 0x0405 tx timeout [ 302.686491][T14642] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2332'. [ 302.872157][T14663] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2335'. [ 302.949542][T14663] unsupported nla_type 7424 [ 302.964164][T14667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2339'. [ 302.979949][T14669] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2338'. [ 303.094718][T14667] bond13: Invalid ad_actor_system MAC address. [ 303.101849][T14667] bond13: option ad_actor_system: invalid value (1) [ 303.111386][T14667] bond13 (unregistering): Released all slaves [ 303.197418][T14679] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2341'. [ 303.310576][T14679] netlink: 'syz.0.2341': attribute type 2 has an invalid length. [ 303.358772][T14679] netlink: 'syz.0.2341': attribute type 1 has an invalid length. [ 303.382659][T14679] netlink: 'syz.0.2341': attribute type 1 has an invalid length. [ 303.418146][T14679] netlink: 'syz.0.2341': attribute type 1 has an invalid length. [ 303.487921][T14694] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2344'. [ 303.600108][T14699] netlink: 'syz.3.2347': attribute type 1 has an invalid length. [ 303.612011][T14701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2346'. [ 303.773491][T14705] 8021q: adding VLAN 0 to HW filter on device bond9 [ 303.793725][T14705] bond8: (slave bond9): making interface the new active one [ 303.808767][T14705] bond8: (slave bond9): Enslaving as an active interface with an up link [ 303.837252][T14713] bond8: (slave gretap2): Enslaving as a backup interface with an up link [ 303.893498][T14699] bond8: entered allmulticast mode [ 303.899672][T14699] bond9: entered allmulticast mode [ 304.617503][T14765] netlink: 'syz.3.2367': attribute type 1 has an invalid length. [ 304.768762][T14765] 8021q: adding VLAN 0 to HW filter on device bond10 [ 305.006237][T14790] batadv0: entered promiscuous mode [ 305.030560][T14790] ip6gretap0: entered promiscuous mode [ 305.055842][T14790] hsr2: entered promiscuous mode [ 305.564055][T14822] __nla_validate_parse: 6 callbacks suppressed [ 305.564073][T14822] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2377'. [ 305.716522][T14830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2380'. [ 305.725865][T14833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2382'. [ 305.792078][T14830] pim6reg: entered allmulticast mode [ 305.798353][T14830] pim6reg: left allmulticast mode [ 305.972012][T14839] netlink: 'syz.0.2386': attribute type 4 has an invalid length. [ 306.024544][T14843] xt_hashlimit: size too large, truncated to 1048576 [ 306.189732][T14855] team0: Caught tx_queue_len zero misconfig [ 306.420909][T14862] xt_l2tp: invalid flags combination: 0 [ 306.647115][T14871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2394'. [ 306.790499][T14880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2394'. [ 306.825431][T14881] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2399'. [ 306.848947][T14880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2394'. [ 306.954539][T14866] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 307.194098][T14893] xfrm0 speed is unknown, defaulting to 1000 [ 307.216079][T14893] xfrm0 speed is unknown, defaulting to 1000 [ 307.251532][T14893] xfrm0 speed is unknown, defaulting to 1000 [ 307.300448][T14893] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 307.335333][T14893] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 307.378177][T14893] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 307.492471][T14893] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 307.549056][T14915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.567431][T14893] xfrm0 speed is unknown, defaulting to 1000 [ 307.594005][T14893] xfrm0 speed is unknown, defaulting to 1000 [ 307.630871][T14893] xfrm0 speed is unknown, defaulting to 1000 [ 307.684930][T14893] xfrm0 speed is unknown, defaulting to 1000 [ 307.703479][T14893] xfrm0 speed is unknown, defaulting to 1000 [ 308.043166][T14939] netlink: 'syz.1.2417': attribute type 4 has an invalid length. [ 308.157673][T14942] netlink: 'syz.1.2419': attribute type 10 has an invalid length. [ 308.179283][T14942] veth1_macvtap: left promiscuous mode [ 308.202071][T14942] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 310.373799][T14907] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 310.593591][T14973] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2428'. [ 310.626345][T14975] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2430'. [ 310.640443][T14973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2428'. [ 310.653699][T14970] syzkaller1: entered promiscuous mode [ 310.653962][T14973] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2428'. [ 310.662934][T14970] syzkaller1: entered allmulticast mode [ 310.682486][T14973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2428'. [ 310.716420][T14970] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 310.741769][T14970] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2426'. [ 310.984311][T14996] syzkaller1: entered promiscuous mode [ 310.995741][T14996] syzkaller1: entered allmulticast mode [ 311.007933][T14967] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 311.107086][T14981] veth0: entered promiscuous mode [ 311.140168][T14981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2433'. [ 311.224764][T14981] veth0 (unregistering): left promiscuous mode [ 311.290779][T15003] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2439'. [ 311.338260][T15006] xt_hashlimit: size too large, truncated to 1048576 [ 311.353628][T15011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2439'. [ 311.509094][T15015] bridge_slave_0 (unregistering): left allmulticast mode [ 311.570934][T15015] bridge_slave_0 (unregistering): left promiscuous mode [ 311.618774][T15015] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.654634][T15026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2444'. [ 312.092479][T15055] xt_limit: Overflow, try lower: 271964/0 [ 312.173934][T15058] xt_hashlimit: size too large, truncated to 1048576 [ 312.710384][T15090] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 315.503768][T15079] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 315.518092][T15098] netlink: 'syz.0.2461': attribute type 1 has an invalid length. [ 315.762440][T15132] __nla_validate_parse: 5 callbacks suppressed [ 315.762459][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2470'. [ 315.927564][T15141] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2474'. [ 316.004111][T15141] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2474'. [ 316.052667][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2475'. [ 316.221246][T15158] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2477'. [ 316.504830][T15175] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2482'. [ 316.772966][T15187] netlink: 'syz.4.2487': attribute type 29 has an invalid length. [ 316.783535][T15187] netlink: 'syz.4.2487': attribute type 29 has an invalid length. [ 316.810303][T15187] netlink: 'syz.4.2487': attribute type 32 has an invalid length. [ 316.838493][T15187] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2487'. [ 316.977529][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.984282][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.191915][T15228] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2496'. [ 317.585037][T15255] sctp: [Deprecated]: syz.3.2501 (pid 15255) Use of int in max_burst socket option. [ 317.585037][T15255] Use struct sctp_assoc_value instead [ 317.589124][T15258] netlink: 'syz.4.2502': attribute type 1 has an invalid length. [ 317.664492][T15258] 8021q: adding VLAN 0 to HW filter on device bond7 [ 317.689632][T15264] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2503'. [ 317.767657][T15270] netlink: 'syz.4.2504': attribute type 1 has an invalid length. [ 317.775813][T15270] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2504'. [ 317.920590][T15281] syzkaller0: entered promiscuous mode [ 317.936640][T15281] syzkaller0: entered allmulticast mode [ 317.993142][T15284] netlink: 'syz.3.2509': attribute type 2 has an invalid length. [ 318.164969][T15295] ip6t_srh: unknown srh match flags 4000 [ 319.178850][T15364] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 319.448002][T15367] bond11: Unable to set peer notification delay as MII monitoring is disabled [ 319.459800][T15367] bond11 (unregistering): Released all slaves [ 319.606823][T15380] netlink: 'syz.1.2537': attribute type 1 has an invalid length. [ 319.652559][T15380] 8021q: adding VLAN 0 to HW filter on device bond14 [ 319.687495][T15380] bond14: (slave veth3): Enslaving as an active interface with a down link [ 319.738309][T15384] syzkaller0: entered promiscuous mode [ 319.784763][T15384] syzkaller0: entered allmulticast mode [ 320.386775][T15417] syzkaller0: entered promiscuous mode [ 320.392286][T15417] syzkaller0: entered allmulticast mode [ 320.411410][T15419] veth7: entered promiscuous mode [ 320.419799][T15419] veth7: entered allmulticast mode [ 320.605004][T15432] netlink: 'syz.3.2554': attribute type 4 has an invalid length. [ 320.777310][T15439] netlink: 'syz.3.2559': attribute type 2 has an invalid length. [ 320.832165][T15451] netlink: 'syz.3.2559': attribute type 2 has an invalid length. [ 320.861948][T15445] syzkaller0: entered promiscuous mode [ 320.902981][T15445] syzkaller0: entered allmulticast mode [ 320.981096][T15462] netlink: 'syz.3.2563': attribute type 5 has an invalid length. [ 321.543816][T15489] netlink: 'syz.3.2568': attribute type 9 has an invalid length. [ 323.179943][T15497] netlink: 'syz.0.2573': attribute type 1 has an invalid length. [ 323.386977][T15497] bond10: entered promiscuous mode [ 323.401348][T15497] 8021q: adding VLAN 0 to HW filter on device bond10 [ 323.466414][T15510] netlink: 'syz.1.2576': attribute type 1 has an invalid length. [ 323.513197][T15510] 8021q: adding VLAN 0 to HW filter on device bond15 [ 323.587739][T15506] 8021q: adding VLAN 0 to HW filter on device bond10 [ 323.596803][T15506] bond10: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 323.625090][T15523] netlink: 'syz.2.2577': attribute type 1 has an invalid length. [ 323.634853][T15506] bond10: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 323.674701][T15506] bond10: (slave ip6gre1): making interface the new active one [ 323.684658][T15506] ip6gre1: entered promiscuous mode [ 323.692670][T15506] bond10: (slave ip6gre1): Enslaving as an active interface with an up link [ 323.760875][T15510] bond15: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 323.986628][T15529] __nla_validate_parse: 15 callbacks suppressed [ 323.986647][T15529] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2579'. [ 324.117800][T15535] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2582'. [ 324.366819][T15549] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2586'. [ 324.470819][T15553] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2583'. [ 324.543923][T15560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2588'. [ 324.649455][T15568] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2590'. [ 324.698781][ T8673] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 324.706825][ T8673] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 324.729651][ T5638] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 324.811656][T15575] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 324.877169][T15578] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2593'. [ 325.039605][T15586] dvmrp0: entered allmulticast mode [ 325.484354][T15608] sctp: [Deprecated]: syz.2.2600 (pid 15608) Use of struct sctp_assoc_value in delayed_ack socket option. [ 325.484354][T15608] Use struct sctp_sack_info instead [ 325.502840][T15607] netlink: 'syz.1.2601': attribute type 1 has an invalid length. [ 325.554175][T15620] netlink: 'syz.1.2601': attribute type 1 has an invalid length. [ 325.556182][T15614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2603'. [ 325.603123][T15614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2603'. [ 325.629223][ T5638] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 325.656140][T15614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2603'. [ 325.693267][T15614] validate_nla: 1 callbacks suppressed [ 325.693282][T15614] netlink: 'syz.4.2603': attribute type 1 has an invalid length. [ 325.709811][ T5638] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 325.736809][T15624] netlink: 'syz.2.2604': attribute type 1 has an invalid length. [ 325.884835][T15624] bond11: entered promiscuous mode [ 325.891111][T15624] 8021q: adding VLAN 0 to HW filter on device bond11 [ 327.396128][T15552] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 327.405219][T15637] netlink: 'syz.4.2609': attribute type 1 has an invalid length. [ 327.633925][T15674] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.646396][T15678] netlink: 'syz.0.2621': attribute type 1 has an invalid length. [ 328.505662][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 331.043507][T15704] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 331.229548][T15733] __nla_validate_parse: 6 callbacks suppressed [ 331.229565][T15733] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2634'. [ 331.249141][T15738] openvswitch: netlink: IP tunnel dst address not specified [ 331.583221][T15751] xt_cgroup: path and classid specified [ 331.620193][T15763] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2642'. [ 331.679278][T15763] netlink: 'syz.4.2642': attribute type 10 has an invalid length. [ 331.903923][T15775] netlink: 'syz.3.2644': attribute type 8 has an invalid length. [ 331.926548][T15775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2644'. [ 332.060905][T15775] veth1_to_team: entered promiscuous mode [ 332.068604][T15775] veth1_to_team: left promiscuous mode [ 332.082648][T15780] tipc: Enabled bearer , priority 0 [ 332.251879][T15780] syzkaller0: entered promiscuous mode [ 332.282778][T15780] syzkaller0: entered allmulticast mode [ 332.306942][T15788] tipc: Resetting bearer [ 332.326017][T15776] tipc: Resetting bearer [ 332.404488][T15776] tipc: Disabling bearer [ 332.724017][T15821] syzkaller0: entered promiscuous mode [ 332.730459][T15821] syzkaller0: entered allmulticast mode [ 335.249413][T15790] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 335.515206][T15841] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2660'. [ 335.558558][T15841] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2660'. [ 335.632112][T15841] netlink: 'syz.1.2660': attribute type 10 has an invalid length. [ 335.699155][T15841] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2660'. [ 335.828831][T15841] dummy0: entered promiscuous mode [ 336.120141][T15889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2673'. [ 336.175482][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 336.242118][T15902] xt_limit: Overflow, try lower: 271964/0 [ 336.268967][T15889] bond11: entered promiscuous mode [ 336.275783][T15889] bond11: entered allmulticast mode [ 336.547017][T15918] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 336.607438][T15922] netlink: 'syz.2.2681': attribute type 12 has an invalid length. [ 336.648849][T15923] netlink: 'syz.2.2681': attribute type 12 has an invalid length. [ 336.681775][T15922] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2681'. [ 336.738948][T15922] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2681'. [ 336.872730][T15933] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2684'. [ 336.901263][T15933] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2684'. [ 337.455482][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 337.849896][ T5650] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 337.865919][ T5650] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 337.876176][ T5650] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 337.889721][ T5650] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 337.897971][ T5650] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 337.898510][T15995] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2701'. [ 338.099428][T16007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2705'. [ 338.140928][T16007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2705'. [ 338.224769][T16007] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2705'. [ 338.242402][T16013] netlink: 'syz.0.2706': attribute type 11 has an invalid length. [ 338.277666][T16012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2704'. [ 338.305849][T16012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2704'. [ 338.523085][ T5633] syz_tun (unregistering): left allmulticast mode [ 338.562244][ T5633] syz_tun (unregistering): left promiscuous mode [ 338.582609][ T5633] bridge0: port 4(syz_tun) entered disabled state [ 338.635554][T16034] netlink: 'syz.4.2712': attribute type 2 has an invalid length. [ 338.993399][ T8673] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.020543][ T8673] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.035911][ T8673] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 339.074424][T16055] netlink: 'syz.1.2716': attribute type 3 has an invalid length. [ 339.151609][T15991] lo speed is unknown, defaulting to 1000 [ 339.250167][T16061] netlink: 'syz.1.2720': attribute type 17 has an invalid length. [ 339.270880][ T8673] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.298487][ T8673] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.312107][ T8673] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 339.340923][T15991] lo speed is unknown, defaulting to 1000 [ 339.353389][T16061] gretap0: entered promiscuous mode [ 339.368048][T16061] gretap0: left promiscuous mode [ 339.438647][ T8673] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.450011][ T8673] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.478001][ T8673] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 339.759381][ T8673] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.818451][ T8673] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.853596][ T8673] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 340.004918][T15991] xfrm0 speed is unknown, defaulting to 1000 [ 340.022280][ T4951] Bluetooth: hci5: command tx timeout [ 340.310622][ T30] audit: type=1800 audit(1781515983.942:7): pid=16109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2733" name="memory.events" dev="tmpfs" ino=2924 res=0 errno=0 [ 340.392687][ T30] audit: type=1804 audit(1781515983.942:8): pid=16109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2733" name="/newroot/567/memory.events" dev="tmpfs" ino=2924 res=1 errno=0 [ 340.486467][T16112] bond8: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 340.498769][T16112] bond8 (unregistering): Released all slaves [ 340.757567][ T8673] gretap0: left allmulticast mode [ 340.770218][ T8673] bridge0: port 3(gretap0) entered disabled state [ 340.804769][ T8673] bridge_slave_1: left allmulticast mode [ 340.822193][ T8673] bridge_slave_1: left promiscuous mode [ 340.831134][ T8673] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.891039][ T8673] tipc: Resetting bearer [ 341.010999][ T8673] bond5 (unregistering): (slave ip6gre1): Releasing backup interface [ 341.019277][ T8673] ip6gre1 (unregistering): left promiscuous mode [ 341.074158][ T8673] tipc: Disabling bearer [ 341.188560][T16143] netlink: 'syz.2.2739': attribute type 4 has an invalid length. [ 341.198163][ T8673] bond8 (unregistering): (slave gretap2): Releasing backup interface [ 341.223751][ T8673] tipc: Disabling bearer [ 341.255170][ T8673] bond3 (unregistering): (slave geneve2): Releasing active interface [ 341.491482][ T8673] bond6 (unregistering): (slave bridge5): Releasing backup interface [ 341.578904][ T8673] batman_adv: batadv0: Removing interface: bridge6 [ 341.691683][ T8673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.703928][ T8673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.717853][ T8673] bond0 (unregistering): Released all slaves [ 341.729568][ T8673] bond1 (unregistering): Released all slaves [ 341.743408][ T8673] bond2 (unregistering): (slave lo): Releasing backup interface [ 341.751887][ T8673] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 341.765787][ T8673] bond2 (unregistering): Released all slaves [ 341.795014][ T8673] bond3 (unregistering): Released all slaves [ 341.809986][ T8673] bond4 (unregistering): Released all slaves [ 341.823506][ T8673] bond5 (unregistering): Released all slaves [ 341.837547][ T8673] bond6 (unregistering): Released all slaves [ 341.852385][ T8673] bond7 (unregistering): Released all slaves [ 341.884980][ T8673] bond8 (unregistering): (slave bond9): Releasing backup interface [ 341.894452][ T8673] bond9 (unregistering): left allmulticast mode [ 341.901683][ T8673] bond8 (unregistering): Released all slaves [ 341.919944][ T8673] bond9 (unregistering): Released all slaves [ 341.933600][ T8673] bond10 (unregistering): Released all slaves [ 341.949456][ T8673] bond11 (unregistering): Released all slaves [ 341.982667][T16127] syzkaller0: entered promiscuous mode [ 342.003091][T16127] syzkaller0: entered allmulticast mode [ 342.091109][T16147] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 342.103142][ T4951] Bluetooth: hci5: command tx timeout [ 342.110990][T16149] __nla_validate_parse: 78 callbacks suppressed [ 342.111006][T16149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2740'. [ 342.114279][T16147] bond8 (unregistering): Released all slaves [ 342.118655][T16149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2740'. [ 342.168640][T16150] netlink: 'syz.4.2740': attribute type 8 has an invalid length. [ 342.230311][T16152] netlink: 536 bytes leftover after parsing attributes in process `syz.2.2741'. [ 342.239990][T16152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2741'. [ 342.264336][ T808] lo speed is unknown, defaulting to 1000 [ 342.342511][ T8673] : left promiscuous mode [ 342.388575][T16159] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2743'. [ 342.505892][ T8673] tipc: Disabling bearer [ 342.528091][ T8673] tipc: Left network mode [ 342.559832][T16163] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2744'. [ 342.674282][T16163] syzkaller1: entered promiscuous mode [ 342.696167][T16163] syzkaller1: entered allmulticast mode [ 342.981422][T16176] macvtap1: entered promiscuous mode [ 343.002622][T16176] macvtap1: entered allmulticast mode [ 343.015822][T16176] veth1_vlan: entered allmulticast mode [ 343.053439][T16179] macvtap2: entered promiscuous mode [ 343.060287][T16179] macvtap2: entered allmulticast mode [ 343.289830][T16179] macvtap2: entered promiscuous mode [ 343.312914][T16179] macvtap2: entered allmulticast mode [ 343.839375][ T5297] 8021q: adding VLAN 0 to HW filter on device eth1 [ 343.877954][T15991] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.917232][T15991] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.991135][T15991] bridge_slave_0: entered allmulticast mode [ 344.042785][T15991] bridge_slave_0: entered promiscuous mode [ 344.121394][T15991] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.171724][T15991] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.179377][ T4951] Bluetooth: hci5: command tx timeout [ 344.201695][T15991] bridge_slave_1: entered allmulticast mode [ 344.217404][T15991] bridge_slave_1: entered promiscuous mode [ 344.476987][ T8673] batman_adv: batadv0: Interface deactivated: wlan0 [ 344.578467][ T8673] batman_adv: batadv0: Removing interface: wlan0 [ 344.600266][T15991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.641819][T15991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.992391][T15991] team0: Port device team_slave_0 added [ 345.023709][T15991] team0: Port device team_slave_1 added [ 345.327597][T16289] syzkaller0: entered promiscuous mode [ 345.362871][T16289] syzkaller0: entered allmulticast mode [ 345.374209][T15991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.387037][T15991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.429933][T15991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.994445][T16319] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2774'. [ 346.023605][T16319] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 346.255562][ T4951] Bluetooth: hci5: command tx timeout [ 346.294237][T16322] netlink: 'syz.1.2775': attribute type 1 has an invalid length. [ 346.413028][T16324] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2775'. [ 347.654426][T15991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.662099][T15991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.688818][T15991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.752810][ T5297] 8021q: adding VLAN 0 to HW filter on device eth2 [ 347.823222][T16322] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 347.831843][T16325] tipc: Resetting bearer [ 348.156424][ T5800] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 348.234975][ T5753] xfrm0 speed is unknown, defaulting to 1000 [ 348.256386][ T24] xfrm0 speed is unknown, defaulting to 1000 [ 348.324538][ T8673] hsr_slave_0: left promiscuous mode [ 348.334752][ T8673] hsr_slave_1: left promiscuous mode [ 348.356029][ T8673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.363446][ T8673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.411955][ T8673] vlan0: left allmulticast mode [ 348.418610][ T8673] ve: left allmulticast mode [ 348.423667][ T8673] vlan0: left promiscuous mode [ 348.429601][ T8673] veth1_macvtap: left promiscuous mode [ 348.439133][ T8673] veth0_macvtap: left promiscuous mode [ 348.446937][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 348.458800][ T8673] veth1_vlan: left promiscuous mode [ 348.518547][T16358] nbd: must specify a size in bytes for the device [ 349.521387][ T8673] team0 (unregistering): Port device team_slave_1 removed [ 349.540138][ T8673] team0 (unregistering): Port device team_slave_0 removed [ 349.715003][ T8685] smbdirect: ib_dev[syś2] removed [ 349.777223][T15991] hsr_slave_0: entered promiscuous mode [ 349.783823][T15991] hsr_slave_1: entered promiscuous mode [ 350.278453][T16370] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2786'. [ 350.499742][T16400] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.2790'. [ 350.531446][T16400] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 350.895449][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 350.968255][T16420] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2795'. [ 351.053603][ T8673] IPVS: stop unused estimator thread 0... [ 351.471464][T16448] netlink: 'syz.2.2802': attribute type 10 has an invalid length. [ 351.574173][T16448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.590085][T16448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.601512][T16448] batman_adv: batadv0: Removing interface: gretap1 [ 351.937450][T15991] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 351.960803][T15991] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 351.986158][T15991] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 352.041952][T15991] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 352.085836][T15991] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 352.120294][T15991] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 352.144337][T15991] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 352.170663][T15991] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 352.210018][T16484] netlink: 'syz.1.2809': attribute type 1 has an invalid length. [ 352.383861][T16484] 8021q: adding VLAN 0 to HW filter on device bond16 [ 352.470533][T16496] bond15: (slave veth0_to_bond): Releasing backup interface [ 352.529567][T16496] bond16: (slave veth0_to_bond): making interface the new active one [ 352.556996][T16496] bond16: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 352.655213][T16484] 8021q: adding VLAN 0 to HW filter on device bond17 [ 352.672094][T16484] bond16: (slave bond17): Enslaving as an active interface with a down link [ 352.841000][T15991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.930203][T15991] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.018544][ T3345] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.025760][ T3345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.113713][ T8671] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.120895][ T8671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.182277][T16538] pim6reg1: entered promiscuous mode [ 353.206988][T16538] pim6reg1: entered allmulticast mode [ 353.394319][T16556] netlink: 'syz.0.2821': attribute type 1 has an invalid length. [ 353.609399][T16556] 8021q: adding VLAN 0 to HW filter on device bond11 [ 353.698790][T16558] tipc: Enabling of bearer rejected, failed to enable media [ 353.893156][T16574] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2825'. [ 353.909905][T16577] netlink: 'syz.0.2824': attribute type 1 has an invalid length. [ 354.018871][T16582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.074619][T16577] 8021q: adding VLAN 0 to HW filter on device bond12 [ 354.169695][T16578] bond12: (slave gretap2): making interface the new active one [ 354.182615][T16578] bond12: (slave gretap2): Enslaving as an active interface with an up link [ 354.493837][T16600] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2829'. [ 354.515131][T16600] veth0_to_bond: default FDB implementation only supports local addresses [ 354.809865][T16612] veth9: entered allmulticast mode [ 355.138507][T15991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.213320][T16631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2837'. [ 355.371616][T15991] veth0_vlan: entered promiscuous mode [ 355.408655][T15991] veth1_vlan: entered promiscuous mode [ 355.461155][T16643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2841'. [ 355.566791][T15991] veth0_macvtap: entered promiscuous mode [ 355.596412][T15991] veth1_macvtap: entered promiscuous mode [ 355.671906][T15991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.744577][T16660] xt_time: unknown flags 0xf4 [ 355.748688][T15991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.820548][ T3345] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.846600][ T3345] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.906856][ T3345] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.979675][ T3345] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.073987][T16676] ip6erspan1: entered allmulticast mode [ 356.331523][T16691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2852'. [ 356.368833][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.422245][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.544105][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.580419][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.580851][T16700] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2857'. [ 356.828561][T16712] netlink: 308 bytes leftover after parsing attributes in process `syz.3.2697'. [ 357.018746][T16724] netlink: 'syz.1.2865': attribute type 1 has an invalid length. [ 357.030085][T16724] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2865'. [ 357.047208][T16725] netlink: 'syz.4.2864': attribute type 15 has an invalid length. [ 357.079671][T16725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2864'. [ 357.106299][T16725] netlink: 'syz.4.2864': attribute type 15 has an invalid length. [ 357.111700][T16729] netlink: 'syz.0.2866': attribute type 1 has an invalid length. [ 357.119146][T16725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2864'. [ 357.194587][T16734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2867'. [ 357.251014][T16735] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2867'. [ 357.282418][T16725] netlink: 'syz.4.2864': attribute type 15 has an invalid length. [ 357.315921][T16725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2864'. [ 357.344360][T16725] netlink: 'syz.4.2864': attribute type 15 has an invalid length. [ 357.372613][T16725] netlink: 'syz.4.2864': attribute type 15 has an invalid length. [ 357.430358][T16725] netlink: 'syz.4.2864': attribute type 15 has an invalid length. [ 357.485006][T16725] netlink: 'syz.4.2864': attribute type 15 has an invalid length. [ 357.588614][T16725] netlink: 'syz.4.2864': attribute type 15 has an invalid length. [ 357.995118][ T5650] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 358.012502][ T5650] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 358.029091][ T5650] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 358.046144][ T5650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 358.059424][ T5650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 358.277915][T16776] syzkaller1: entered promiscuous mode [ 358.308963][T16776] syzkaller1: entered allmulticast mode [ 359.139157][T16761] lo speed is unknown, defaulting to 1000 [ 359.318319][T16761] xfrm0 speed is unknown, defaulting to 1000 [ 359.554324][T16761] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.561805][T16761] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.569072][T16761] bridge_slave_0: entered allmulticast mode [ 359.576472][T16761] bridge_slave_0: entered promiscuous mode [ 359.585146][T16761] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.592713][T16761] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.600090][T16761] bridge_slave_1: entered allmulticast mode [ 359.607664][T16761] bridge_slave_1: entered promiscuous mode [ 359.641601][T16761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.653622][T16761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.710189][T16761] team0: Port device team_slave_0 added [ 359.732507][T16761] team0: Port device team_slave_1 added [ 359.763403][T16761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.771876][T16761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.799567][T16761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.811561][T16761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.818668][T16761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.845131][T16761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.886834][T16761] hsr_slave_0: entered promiscuous mode [ 359.893950][T16761] hsr_slave_1: entered promiscuous mode [ 359.900248][T16761] debugfs: 'hsr0' already exists in 'hsr' [ 359.906258][T16761] Cannot create hsr debugfs directory [ 360.043736][T16761] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.055834][T16761] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 360.095577][ T4951] Bluetooth: hci0: command tx timeout [ 360.139074][T16761] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.149597][T16761] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 360.223233][T16761] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.233810][T16761] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 360.308652][T16761] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.319536][T16761] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 361.652020][T16789] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 361.677270][T16761] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 361.791187][T16761] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 361.842092][T16761] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 361.889268][T16761] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 361.905704][T16838] __nla_validate_parse: 66 callbacks suppressed [ 361.905744][T16838] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2891'. [ 361.922364][T16761] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 361.927975][T16840] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2893'. [ 361.936356][ T5745] IPVS: starting estimator thread 0... [ 361.949877][T16761] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 361.959280][T16761] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 361.987616][T16761] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 362.050865][T16843] IPVS: using max 31 ests per chain, 74400 per kthread [ 362.091640][T16847] xt_l2tp: missing protocol rule (udp|l2tpip) [ 362.104874][T16849] xt_l2tp: missing protocol rule (udp|l2tpip) [ 362.178321][ T4951] Bluetooth: hci0: command tx timeout [ 362.538616][T16867] validate_nla: 58 callbacks suppressed [ 362.538673][T16867] netlink: 'syz.1.2898': attribute type 10 has an invalid length. [ 364.196108][T16867] dummy0: left promiscuous mode [ 364.220783][T16867] team0: Port device dummy0 added [ 364.268160][ T4951] Bluetooth: hci0: command tx timeout [ 364.382833][T16877] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2902'. [ 364.392762][T16877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2902'. [ 364.413337][T16877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2902'. [ 364.466684][T16761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.540756][T16761] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.569782][T16888] netlink: 'syz.3.2901': attribute type 1 has an invalid length. [ 364.660239][T16890] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2903'. [ 364.702175][T16890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2903'. [ 364.728971][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.736155][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.741527][T16890] netlink: 'syz.2.2903': attribute type 1 has an invalid length. [ 364.780976][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.788196][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.799305][T16895] syz_tun: refused to change device tx_queue_len [ 364.851364][T16903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2903'. [ 364.927548][T16905] netlink: 'syz.3.2907': attribute type 11 has an invalid length. [ 364.942431][T16905] netlink: 'syz.3.2907': attribute type 11 has an invalid length. [ 364.952797][T16905] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2907'. [ 365.013878][T16911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2907'. [ 365.600488][T16938] netlink: 'syz.1.2913': attribute type 1 has an invalid length. [ 365.787500][T16955] xt_l2tp: invalid flags combination: 8 [ 366.341242][ T4951] Bluetooth: hci0: command tx timeout [ 366.515082][T16761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.654393][T17005] netlink: 'syz.3.2924': attribute type 5 has an invalid length. [ 366.701970][T16761] veth0_vlan: entered promiscuous mode [ 366.756188][T16761] veth1_vlan: entered promiscuous mode [ 366.833934][T16761] veth0_macvtap: entered promiscuous mode [ 366.871373][T17010] netlink: 'syz.4.2926': attribute type 4 has an invalid length. [ 366.875706][T16761] veth1_macvtap: entered promiscuous mode [ 366.937860][T16761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.963260][T17014] __nla_validate_parse: 7 callbacks suppressed [ 366.963276][T17014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2927'. [ 367.047767][T16761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.133668][ T8671] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.174334][ T8671] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.242054][ T8671] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.284941][T17028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2931'. [ 367.302772][ T8671] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.316322][T17027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2929'. [ 367.597218][T15209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.627689][T15209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.690289][ T8683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.708671][ T8683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.262419][T17087] xt_HMARK: proto mask must be zero with L3 mode [ 368.446956][T17085] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2942'. [ 368.481119][T17095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2945'. [ 368.565534][T17096] ip6erspan0: entered allmulticast mode [ 368.628045][T17101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2947'. [ 368.924318][T17101] bond8: Invalid ad_actor_system MAC address. [ 368.931751][T17101] bond8: option ad_actor_system: invalid value (1) [ 368.946822][T17101] bond8 (unregistering): Released all slaves [ 368.978725][T17119] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2951'. [ 368.991905][T17111] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 369.020208][T17119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2951'. [ 369.036127][T17119] netlink: 'syz.0.2951': attribute type 1 has an invalid length. [ 369.037145][T17120] netlink: 'syz.0.2951': attribute type 1 has an invalid length. [ 369.044460][T17119] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2951'. [ 369.107797][T17120] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2951'. [ 369.179953][T17126] netlink: 'syz.2.2953': attribute type 11 has an invalid length. [ 371.550473][T17182] bridge0: port 3(gretap0) entered blocking state [ 371.570348][T17182] bridge0: port 3(gretap0) entered disabled state [ 371.586420][T17182] gretap0: entered allmulticast mode [ 371.599787][T17182] gretap0: entered promiscuous mode [ 371.613670][T17182] bridge0: port 3(gretap0) entered blocking state [ 371.620255][T17182] bridge0: port 3(gretap0) entered forwarding state [ 371.691486][T17191] netlink: Unknown conntrack attr (0) [ 372.329775][T17225] __nla_validate_parse: 8 callbacks suppressed [ 372.329793][T17225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2982'. [ 372.420726][ T4951] block nbd2: Receive control failed (result -1) [ 372.516066][T17229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2981'. [ 372.555970][T17229] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2981'. [ 372.581878][T17234] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 372.624716][T17238] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2986'. [ 372.900545][T17260] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2988'. [ 372.942732][T17262] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 372.944220][T17255] bond1: option all_slaves_active: invalid value (222) [ 372.964935][T17255] bond1 (unregistering): Released all slaves [ 373.056725][T17258] batman_adv: batadv0: Adding interface: wlan0 [ 373.076000][T17258] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.186311][T17258] batman_adv: batadv0: Interface activated: wlan0 [ 373.258361][T17280] sctp: [Deprecated]: syz.0.2996 (pid 17280) Use of int in max_burst socket option. [ 373.258361][T17280] Use struct sctp_assoc_value instead [ 373.288284][T17255] bond1: option all_slaves_active: invalid value (222) [ 373.319001][T17255] bond1 (unregistering): Released all slaves [ 373.633204][T17255] bond1: option all_slaves_active: invalid value (222) [ 373.649911][T17255] bond1 (unregistering): Released all slaves [ 373.791387][T17307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3004'. [ 374.057485][T17320] netlink: 'syz.2.3007': attribute type 1 has an invalid length. [ 374.133880][T17320] 8021q: adding VLAN 0 to HW filter on device bond13 [ 374.217722][T17334] IPv6: NLM_F_CREATE should be specified when creating new route [ 374.304172][T17320] xt_CT: You must specify a L4 protocol and not use inversions on it [ 374.318671][T17328] vlan3: entered promiscuous mode [ 374.395948][T17328] bond13: entered promiscuous mode [ 374.401358][T17328] vlan3: entered allmulticast mode [ 374.407223][T17320] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3007'. [ 374.407233][T17328] bond13: entered allmulticast mode [ 374.590007][T17348] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3016'. [ 374.622015][T17350] x_tables: duplicate underflow at hook 2 [ 374.688568][T17354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3019'. [ 374.850459][T17366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3021'. [ 374.944945][T17376] netlink: 'syz.2.3024': attribute type 10 has an invalid length. [ 374.971192][T17376] team0: left allmulticast mode [ 374.984088][T17376] team_slave_0: left allmulticast mode [ 375.016590][T17376] team_slave_1: left allmulticast mode [ 375.022176][T17376] bridge2: left allmulticast mode [ 375.028904][T17376] team0: left promiscuous mode [ 375.033790][T17376] team_slave_0: left promiscuous mode [ 375.039932][T17376] team_slave_1: left promiscuous mode [ 375.047483][T17376] bridge2: left promiscuous mode [ 375.053025][T17376] bridge0: port 4(team0) entered disabled state [ 375.083942][ T30] audit: type=1804 audit(1781516018.712:9): pid=17379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3025" name="/newroot/34/cgroup.controllers" dev="tmpfs" ino=191 res=1 errno=0 [ 375.135443][ T30] audit: type=1800 audit(1781516018.712:10): pid=17379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3025" name="cgroup.controllers" dev="tmpfs" ino=191 res=0 errno=0 [ 375.533311][T17405] sch_fq: defrate 0 ignored. [ 375.907633][T17428] netlink: 'syz.3.3044': attribute type 1 has an invalid length. [ 376.011500][T17428] 8021q: adding VLAN 0 to HW filter on device bond1 [ 376.029296][T17429] bond1: (slave batadv1): Opening slave failed [ 376.198970][T17429] bond1: (slave batadv1): Opening slave failed [ 376.351857][T17429] bond1: (slave batadv1): Opening slave failed [ 376.426612][T17456] syzkaller0: entered promiscuous mode [ 376.433134][T17456] syzkaller0: entered allmulticast mode [ 376.524927][T17429] bond1: (slave batadv1): Opening slave failed [ 376.669204][T17429] bond1: (slave batadv1): Opening slave failed [ 376.950702][T17488] netlink: 'syz.0.3060': attribute type 1 has an invalid length. [ 376.954372][T17489] netlink: 'syz.3.3061': attribute type 21 has an invalid length. [ 377.431624][ T5650] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 377.443675][ T5650] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 377.457018][ T5650] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 377.471603][ T5650] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 377.479753][ T5650] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 377.517349][ T4951] [ 377.519701][ T4951] ====================================================== [ 377.526732][ T4951] WARNING: possible circular locking dependency detected [ 377.533906][ T4951] syzkaller #0 Not tainted [ 377.538355][ T4951] ------------------------------------------------------ [ 377.545416][ T4951] kworker/u9:1/4951 is trying to acquire lock: [ 377.551575][ T4951] ffff88801be85210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 377.562119][ T4951] [ 377.562119][ T4951] but task is already holding lock: [ 377.569460][ T4951] ffff88801be85180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5d0 [ 377.578839][ T4951] [ 377.578839][ T4951] which lock already depends on the new lock. [ 377.578839][ T4951] [ 377.589252][ T4951] [ 377.589252][ T4951] the existing dependency chain (in reverse order) is: [ 377.598258][ T4951] [ 377.598258][ T4951] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 377.606420][ T4951] down_write+0x96/0x200 [ 377.611284][ T4951] kernfs_add_one+0x41/0x5d0 [ 377.616382][ T4951] kernfs_create_dir_ns+0xde/0x130 [ 377.621996][ T4951] internal_create_group+0x440/0x1180 [ 377.627917][ T4951] cpuhp_invoke_callback+0x448/0x860 [ 377.633753][ T4951] cpuhp_issue_call+0x3f0/0x750 [ 377.639110][ T4951] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 377.645682][ T4951] __cpuhp_setup_state+0x3f/0x60 [ 377.651127][ T4951] do_one_initcall+0x250/0x870 [ 377.656420][ T4951] do_initcall_level+0x10a/0x1a0 [ 377.661999][ T4951] do_initcalls+0x59/0xa0 [ 377.666833][ T4951] kernel_init_freeable+0x29d/0x3e0 [ 377.672536][ T4951] kernel_init+0x1d/0x1d0 [ 377.677375][ T4951] ret_from_fork+0x514/0xb70 [ 377.682502][ T4951] ret_from_fork_asm+0x1a/0x30 [ 377.687805][ T4951] [ 377.687805][ T4951] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 377.695616][ T4951] [ 377.695616][ T4951] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 377.703369][ T4951] cpus_read_lock+0x42/0x160 [ 377.708474][ T4951] static_key_slow_inc+0x12/0x30 [ 377.713951][ T4951] setup_udp_tunnel_sock+0x2fd/0x510 [ 377.719850][ T4951] l2tp_tunnel_register+0xdda/0x1490 [ 377.725705][ T4951] pppol2tp_connect+0x8e3/0x18b0 [ 377.731160][ T4951] __sys_connect+0x323/0x460 [ 377.736345][ T4951] __x64_sys_connect+0x7a/0x90 [ 377.741620][ T4951] do_syscall_64+0x174/0x580 [ 377.746758][ T4951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.753176][ T4951] [ 377.753176][ T4951] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 377.760893][ T4951] lock_sock_nested+0x41/0x100 [ 377.766207][ T4951] inet_shutdown+0x6a/0x390 [ 377.771268][ T4951] nbd_mark_nsock_dead+0x2cb/0x550 [ 377.776985][ T4951] recv_work+0x1cef/0x1e10 [ 377.781911][ T4951] process_scheduled_works+0xa8e/0x14e0 [ 377.787962][ T4951] worker_thread+0xa47/0xfb0 [ 377.793058][ T4951] kthread+0x389/0x470 [ 377.797633][ T4951] ret_from_fork+0x514/0xb70 [ 377.802726][ T4951] ret_from_fork_asm+0x1a/0x30 [ 377.807995][ T4951] [ 377.807995][ T4951] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 377.815628][ T4951] __mutex_lock+0x19d/0x1590 [ 377.820726][ T4951] nbd_queue_rq+0x373/0x1150 [ 377.825830][ T4951] blk_mq_dispatch_rq_list+0x499/0x1990 [ 377.831998][ T4951] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 377.838862][ T4951] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 377.845361][ T4951] blk_mq_run_hw_queue+0x348/0x4f0 [ 377.850977][ T4951] blk_mq_dispatch_list+0xd11/0xe10 [ 377.856681][ T4951] blk_mq_flush_plug_list+0x45f/0x540 [ 377.862561][ T4951] __blk_flush_plug+0x3ed/0x4d0 [ 377.867993][ T4951] __submit_bio+0x465/0x560 [ 377.873005][ T4951] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 377.879142][ T4951] block_read_full_folio+0x599/0x830 [ 377.884957][ T4951] filemap_read_folio+0x12c/0x3a0 [ 377.890496][ T4951] do_read_cache_folio+0x354/0x590 [ 377.896119][ T4951] read_part_sector+0xb6/0x2b0 [ 377.901458][ T4951] adfspart_check_ICS+0xb1/0x960 [ 377.906905][ T4951] bdev_disk_changed+0x82b/0x1780 [ 377.912435][ T4951] blkdev_get_whole+0x372/0x510 [ 377.917844][ T4951] bdev_open+0x324/0xd70 [ 377.922594][ T4951] blkdev_open+0x461/0x600 [ 377.927517][ T4951] do_dentry_open+0x816/0x1380 [ 377.932804][ T4951] vfs_open+0x3b/0x340 [ 377.937384][ T4951] path_openat+0x2e3b/0x3890 [ 377.942484][ T4951] do_file_open+0x23e/0x4a0 [ 377.947495][ T4951] do_sys_openat2+0x113/0x200 [ 377.952682][ T4951] __x64_sys_openat+0x138/0x170 [ 377.958038][ T4951] do_syscall_64+0x174/0x580 [ 377.963132][ T4951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.969529][ T4951] [ 377.969529][ T4951] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 377.976726][ T4951] __mutex_lock+0x19d/0x1590 [ 377.981826][ T4951] nbd_queue_rq+0xc1/0x1150 [ 377.986846][ T4951] blk_mq_dispatch_rq_list+0x499/0x1990 [ 377.992899][ T4951] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 377.999736][ T4951] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 378.006223][ T4951] blk_mq_run_hw_queue+0x348/0x4f0 [ 378.011840][ T4951] blk_mq_dispatch_list+0xd11/0xe10 [ 378.017544][ T4951] blk_mq_flush_plug_list+0x45f/0x540 [ 378.023425][ T4951] __blk_flush_plug+0x3ed/0x4d0 [ 378.028782][ T4951] __submit_bio+0x465/0x560 [ 378.033799][ T4951] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 378.039937][ T4951] block_read_full_folio+0x599/0x830 [ 378.045730][ T4951] filemap_read_folio+0x12c/0x3a0 [ 378.051263][ T4951] do_read_cache_folio+0x354/0x590 [ 378.056883][ T4951] read_part_sector+0xb6/0x2b0 [ 378.062152][ T4951] adfspart_check_ICS+0xb1/0x960 [ 378.067596][ T4951] bdev_disk_changed+0x82b/0x1780 [ 378.073124][ T4951] blkdev_get_whole+0x372/0x510 [ 378.078482][ T4951] bdev_open+0x324/0xd70 [ 378.083235][ T4951] blkdev_open+0x461/0x600 [ 378.088158][ T4951] do_dentry_open+0x816/0x1380 [ 378.093424][ T4951] vfs_open+0x3b/0x340 [ 378.097997][ T4951] path_openat+0x2e3b/0x3890 [ 378.103095][ T4951] do_file_open+0x23e/0x4a0 [ 378.108105][ T4951] do_sys_openat2+0x113/0x200 [ 378.113285][ T4951] __x64_sys_openat+0x138/0x170 [ 378.118647][ T4951] do_syscall_64+0x174/0x580 [ 378.123743][ T4951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.130144][ T4951] [ 378.130144][ T4951] -> #4 (set->srcu){.+.+}-{0:0}: [ 378.137256][ T4951] __synchronize_srcu+0xc9/0x2f0 [ 378.142729][ T4951] elevator_switch+0x1e8/0x7b0 [ 378.147999][ T4951] elevator_change+0x2fa/0x480 [ 378.153267][ T4951] elevator_set_default+0x375/0x440 [ 378.158972][ T4951] blk_register_queue+0x3f3/0x4e0 [ 378.164535][ T4951] __add_disk+0x6cb/0xe30 [ 378.169374][ T4951] add_disk_fwnode+0xfb/0x4b0 [ 378.174558][ T4951] nbd_dev_add+0x733/0xb60 [ 378.179482][ T4951] nbd_init+0x15f/0x1e0 [ 378.184253][ T4951] do_one_initcall+0x250/0x870 [ 378.189519][ T4951] do_initcall_level+0x10a/0x1a0 [ 378.194958][ T4951] do_initcalls+0x59/0xa0 [ 378.199789][ T4951] kernel_init_freeable+0x29d/0x3e0 [ 378.205495][ T4951] kernel_init+0x1d/0x1d0 [ 378.210334][ T4951] ret_from_fork+0x514/0xb70 [ 378.215428][ T4951] ret_from_fork_asm+0x1a/0x30 [ 378.220699][ T4951] [ 378.220699][ T4951] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 378.228503][ T4951] __mutex_lock+0x19d/0x1590 [ 378.233600][ T4951] elevator_change+0x1af/0x480 [ 378.238877][ T4951] elevator_set_none+0xb5/0x140 [ 378.244231][ T4951] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 378.250545][ T4951] nbd_start_device+0x189/0xb30 [ 378.255908][ T4951] nbd_genl_connect+0x1597/0x1c10 [ 378.261440][ T4951] genl_family_rcv_msg_doit+0x233/0x340 [ 378.267595][ T4951] genl_rcv_msg+0x614/0x7a0 [ 378.272600][ T4951] netlink_rcv_skb+0x226/0x4a0 [ 378.277880][ T4951] genl_rcv+0x28/0x40 [ 378.282367][ T4951] netlink_unicast+0x7bb/0x940 [ 378.287638][ T4951] netlink_sendmsg+0x813/0xb40 [ 378.292911][ T4951] ____sys_sendmsg+0x9b9/0xa20 [ 378.298185][ T4951] ___sys_sendmsg+0x2a5/0x360 [ 378.303370][ T4951] __x64_sys_sendmsg+0x1bd/0x2a0 [ 378.308820][ T4951] do_syscall_64+0x174/0x580 [ 378.313917][ T4951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.320315][ T4951] [ 378.320315][ T4951] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 378.328971][ T4951] blk_alloc_queue+0x544/0x690 [ 378.334249][ T4951] __blk_mq_alloc_disk+0x194/0x390 [ 378.339868][ T4951] nbd_dev_add+0x494/0xb60 [ 378.344796][ T4951] nbd_init+0x15f/0x1e0 [ 378.349466][ T4951] do_one_initcall+0x250/0x870 [ 378.354733][ T4951] do_initcall_level+0x10a/0x1a0 [ 378.360176][ T4951] do_initcalls+0x59/0xa0 [ 378.365009][ T4951] kernel_init_freeable+0x29d/0x3e0 [ 378.370712][ T4951] kernel_init+0x1d/0x1d0 [ 378.375558][ T4951] ret_from_fork+0x514/0xb70 [ 378.380662][ T4951] ret_from_fork_asm+0x1a/0x30 [ 378.385932][ T4951] [ 378.385932][ T4951] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 378.393128][ T4951] fs_reclaim_acquire+0x71/0x100 [ 378.398608][ T4951] kmem_cache_alloc_noprof+0x40/0x650 [ 378.404486][ T4951] __kernfs_iattrs+0xdd/0x340 [ 378.409670][ T4951] kernfs_iop_setattr+0xe6/0x3f0 [ 378.415111][ T4951] notify_change+0xbba/0xea0 [ 378.420216][ T4951] do_truncate+0x1c2/0x250 [ 378.425143][ T4951] path_openat+0x2fbd/0x3890 [ 378.430252][ T4951] do_file_open+0x23e/0x4a0 [ 378.435274][ T4951] do_sys_openat2+0x113/0x200 [ 378.440467][ T4951] __x64_sys_openat+0x138/0x170 [ 378.445862][ T4951] do_syscall_64+0x174/0x580 [ 378.450958][ T4951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.457365][ T4951] [ 378.457365][ T4951] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 378.465886][ T4951] __lock_acquire+0x1520/0x2cd0 [ 378.471295][ T4951] lock_acquire+0x106/0x350 [ 378.476309][ T4951] down_write+0x96/0x200 [ 378.481067][ T4951] kernfs_link_sibling+0x4c7/0x5a0 [ 378.486694][ T4951] kernfs_add_one+0x1d2/0x5d0 [ 378.491882][ T4951] kernfs_create_dir_ns+0xde/0x130 [ 378.497518][ T4951] sysfs_create_dir_ns+0x12f/0x2a0 [ 378.503166][ T4951] kobject_add_internal+0x622/0xcd0 [ 378.508971][ T4951] kobject_add+0x163/0x240 [ 378.513897][ T4951] device_add+0x3fa/0xb90 [ 378.518872][ T4951] hci_conn_add_sysfs+0xd5/0x210 [ 378.524369][ T4951] hci_conn_complete_evt+0x8a8/0x1350 [ 378.530282][ T4951] hci_event_packet+0x6cd/0xf10 [ 378.535642][ T4951] hci_rx_work+0x3ee/0x1020 [ 378.540709][ T4951] process_scheduled_works+0xa8e/0x14e0 [ 378.546760][ T4951] worker_thread+0xa47/0xfb0 [ 378.551861][ T4951] kthread+0x389/0x470 [ 378.556436][ T4951] ret_from_fork+0x514/0xb70 [ 378.561531][ T4951] ret_from_fork_asm+0x1a/0x30 [ 378.566802][ T4951] [ 378.566802][ T4951] other info that might help us debug this: [ 378.566802][ T4951] [ 378.577008][ T4951] Chain exists of: [ 378.577008][ T4951] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 378.577008][ T4951] [ 378.591479][ T4951] Possible unsafe locking scenario: [ 378.591479][ T4951] [ 378.598953][ T4951] CPU0 CPU1 [ 378.604337][ T4951] ---- ---- [ 378.609718][ T4951] lock(&root->kernfs_rwsem); [ 378.614465][ T4951] lock(cpuhp_state_mutex); [ 378.621561][ T4951] lock(&root->kernfs_rwsem); [ 378.628832][ T4951] lock(&root->kernfs_iattr_rwsem); [ 378.634115][ T4951] [ 378.634115][ T4951] *** DEADLOCK *** [ 378.634115][ T4951] [ 378.642324][ T4951] 4 locks held by kworker/u9:1/4951: [ 378.647587][ T4951] #0: ffff888053da4140 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.658586][ T4951] #1: ffffc9000f84fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.670571][ T4951] #2: ffff8880514fc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350 [ 378.680391][ T4951] #3: ffff88801be85180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5d0 [ 378.690218][ T4951] [ 378.690218][ T4951] stack backtrace: [ 378.696109][ T4951] CPU: 1 UID: 0 PID: 4951 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 378.696128][ T4951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 378.696138][ T4951] Workqueue: hci4 hci_rx_work [ 378.696162][ T4951] Call Trace: [ 378.696223][ T4951] [ 378.696240][ T4951] dump_stack_lvl+0xe8/0x150 [ 378.696270][ T4951] print_circular_bug+0x2e1/0x300 [ 378.696291][ T4951] check_noncircular+0x12e/0x150 [ 378.696311][ T4951] __lock_acquire+0x1520/0x2cd0 [ 378.696329][ T4951] ? __lock_acquire+0x683/0x2cd0 [ 378.696376][ T4951] ? kernfs_link_sibling+0x4c7/0x5a0 [ 378.696396][ T4951] lock_acquire+0x106/0x350 [ 378.696410][ T4951] ? kernfs_link_sibling+0x4c7/0x5a0 [ 378.696435][ T4951] down_write+0x96/0x200 [ 378.696452][ T4951] ? kernfs_link_sibling+0x4c7/0x5a0 [ 378.696471][ T4951] ? __pfx_down_write+0x10/0x10 [ 378.696486][ T4951] ? kernfs_root+0x1c/0x230 [ 378.696504][ T4951] ? kernfs_root+0x1c/0x230 [ 378.696521][ T4951] ? kernfs_root+0x1ea/0x230 [ 378.696540][ T4951] kernfs_link_sibling+0x4c7/0x5a0 [ 378.696563][ T4951] kernfs_add_one+0x1d2/0x5d0 [ 378.696584][ T4951] kernfs_create_dir_ns+0xde/0x130 [ 378.696605][ T4951] sysfs_create_dir_ns+0x12f/0x2a0 [ 378.696623][ T4951] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 378.696642][ T4951] ? do_raw_spin_unlock+0xf5/0x210 [ 378.696664][ T4951] kobject_add_internal+0x622/0xcd0 [ 378.696683][ T4951] kobject_add+0x163/0x240 [ 378.696701][ T4951] ? __pfx_kobject_add+0x10/0x10 [ 378.696718][ T4951] ? get_device_parent+0x366/0x3a0 [ 378.696742][ T4951] device_add+0x3fa/0xb90 [ 378.696765][ T4951] hci_conn_add_sysfs+0xd5/0x210 [ 378.696789][ T4951] hci_conn_complete_evt+0x8a8/0x1350 [ 378.696808][ T4951] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 378.696824][ T4951] ? skb_pull_data+0xf0/0x200 [ 378.696867][ T4951] hci_event_packet+0x6cd/0xf10 [ 378.696884][ T4951] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 378.696899][ T4951] ? __pfx_hci_event_packet+0x10/0x10 [ 378.696915][ T4951] ? tag_mounts+0x14f0/0x1600 [ 378.696944][ T4951] ? hci_send_to_monitor+0xe2/0x590 [ 378.696965][ T4951] hci_rx_work+0x3ee/0x1020 [ 378.696983][ T4951] ? process_scheduled_works+0xa20/0x14e0 [ 378.696997][ T4951] process_scheduled_works+0xa8e/0x14e0 [ 378.697021][ T4951] ? __pfx_process_scheduled_works+0x10/0x10 [ 378.697046][ T4951] ? assign_work+0x3cf/0x5d0 [ 378.697069][ T4951] worker_thread+0xa47/0xfb0 [ 378.697094][ T4951] kthread+0x389/0x470 [ 378.697112][ T4951] ? __pfx_worker_thread+0x10/0x10 [ 378.697125][ T4951] ? __pfx_kthread+0x10/0x10 [ 378.697143][ T4951] ret_from_fork+0x514/0xb70 [ 378.697159][ T4951] ? __pfx_ret_from_fork+0x10/0x10 [ 378.697173][ T4951] ? __switch_to+0xc89/0x1420 [ 378.697195][ T4951] ? __pfx_kthread+0x10/0x10 [ 378.697213][ T4951] ret_from_fork_asm+0x1a/0x30 [ 378.697235][ T4951] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 379.025967][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.428082][T17508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.741543][T15211] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.799107][T15211] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.839037][T15211] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.879697][T15211] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.953212][T15211] bridge_slave_1: left allmulticast mode [ 379.962490][T15211] bridge_slave_1: left promiscuous mode [ 379.968795][T15211] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.978436][T15211] bridge_slave_0: left allmulticast mode [ 379.984089][T15211] bridge_slave_0: left promiscuous mode [ 379.989913][T15211] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.088002][T15211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.102103][T15211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.112469][T15211] bond0 (unregistering): Released all slaves [ 380.121332][T15211] bond1 (unregistering): Released all slaves [ 380.335704][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 380.387676][ T5297] 8021q: adding VLAN 0 to HW filter on device eth1 [ 380.481760][T15211] hsr_slave_0: left promiscuous mode [ 380.488165][T15211] hsr_slave_1: left promiscuous mode [ 380.493892][T15211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.502052][T15211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.510409][T15211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.518357][T15211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.529320][T15211] veth1_macvtap: left promiscuous mode [ 380.534828][T15211] veth0_macvtap: left promiscuous mode [ 380.540397][T15211] veth1_vlan: left promiscuous mode [ 380.546602][T15211] veth0_vlan: left promiscuous mode [ 380.695963][T15211] team0 (unregistering): Port device team_slave_1 removed [ 380.714509][T15211] team0 (unregistering): Port device team_slave_0 removed [ 380.796773][ T5297] 8021q: adding VLAN 0 to HW filter on device eth2 [ 380.992616][T15211] IPVS: stop unused estimator thread 0... [ 381.078441][ T5297] 8021q: adding VLAN 0 to HW filter on device eth3 [ 381.102333][T15211] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.163866][T15211] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.221662][T15211] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.261237][T15211] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.349261][T15211] gretap0: left allmulticast mode [ 381.354368][T15211] gretap0: left promiscuous mode [ 381.362462][T15211] bridge0: port 3(gretap0) entered disabled state [ 381.371237][T15211] bridge_slave_1: left allmulticast mode [ 381.377037][T15211] bridge_slave_1: left promiscuous mode [ 381.382730][T15211] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.391345][T15211] bridge_slave_0: left allmulticast mode [ 381.397358][T15211] bridge_slave_0: left promiscuous mode [ 381.402983][T15211] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.510039][T15211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.520239][T15211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.529788][T15211] bond0 (unregistering): Released all slaves [ 381.537700][T15211] bond1 (unregistering): Released all slaves [ 381.547667][ T5297] 8021q: adding VLAN 0 to HW filter on device eth4 [ 381.814308][ T5297] 8021q: adding VLAN 0 to HW filter on device eth5 [ 381.999633][T15211] hsr_slave_0: left promiscuous mode [ 382.006220][T15211] hsr_slave_1: left promiscuous mode [ 382.012197][T15211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.020383][T15211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.033779][T15211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.041942][T15211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.054938][T15211] veth1_macvtap: left promiscuous mode [ 382.061245][T15211] veth0_macvtap: left promiscuous mode [ 382.067375][T15211] veth1_vlan: left promiscuous mode [ 382.072625][T15211] veth0_vlan: left promiscuous mode [ 382.211972][T15211] team0 (unregistering): Port device team_slave_1 removed [ 382.222498][T15211] team0 (unregistering): Port device team_slave_0 removed [ 382.273260][ T5297] 8021q: adding VLAN 0 to HW filter on device eth6 [ 382.570219][ T5297] 8021q: adding VLAN 0 to HW filter on device eth7 [ 382.770611][ T5297] 8021q: adding VLAN 0 to HW filter on device eth8