last executing test programs: 8.994404076s ago: executing program 4 (id=9254): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x30, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f00000001c0), 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x12a0, 0x1100, 0x18c, 0x203, 0x1100, 0x19030000, 0x11d0, 0x2e0, 0x2e0, 0x11d0, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x10d8, 0x1100, 0x0, {0x1000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0xfffffffc, {0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x8d, 0x74c}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1300) 8.393870043s ago: executing program 4 (id=9260): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x3c}}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x30808000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r3, 0x320, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008005}, 0xc000) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0x3b, @loopback, 0x4e21, 0x3, 'nq\x00', 0x1, 0x80, 0x27}, 0x2c) 7.824106588s ago: executing program 4 (id=9265): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000000d06010200000000000000000200000016000300686173683a6e655b2c706f72742c6e657400000022fa14761de79c9732955e624ff172d8370c1cf78d923238357a14fe7afac8f78b50af707fcbf115bb0846effb5fea5f33c2697aa8681016e31856383661a5f6b3a291a6be1c0b9faff64da168462f5cbab365764364959cd8eb03167e7f77dd46"], 0x3c}, 0x1, 0x0, 0x0, 0x10000}, 0x40880) socket$kcm(0x29, 0x7, 0x0) sendmmsg$inet6(r0, &(0x7f0000006800)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x0, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000640)="c863b1079dccd4e78e59b6d41ecad6149837ffc7418236d295f111cd201ad565c1587e96c6700ffe241eb99fd1af3003bc2f062decdb0287a7c4fd229cbcb05974038659", 0x44}], 0x1}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="85116b7c5c", 0x5}, {0x0, 0x64}], 0x2}}], 0x3, 0x4048800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000016000107030000000000000007"], 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x314) 7.365222631s ago: executing program 4 (id=9266): syz_emit_ethernet(0x66, &(0x7f0000001a40)={@random="0f539af21094", @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 7.212001313s ago: executing program 4 (id=9270): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000700)={r6}, &(0x7f0000000740)=0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r8, 0x114, 0x1d, 0x0, 0x20) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r9, 0x11, 0x0, 0x3}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r9, 0x2, 0x70bd07, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fffffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 7.037679542s ago: executing program 4 (id=9271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xaf}]}}}]}]}], {0x14}}, 0x94}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff8a}, 0x90) sendto$packet(r1, &(0x7f0000000200)="000088a8", 0x4, 0x14000b01, &(0x7f00000000c0)={0x11, 0x8, r2, 0x1, 0x80, 0x6, @multicast}, 0x14) 6.213169357s ago: executing program 1 (id=9279): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x54, r0, 0x4b35c65e9956e69f, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x9b}, {0xc}}]}, 0x54}}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r3, &(0x7f0000000400)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x55, 0x65, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x41, 0x0, @gue={{0x1, 0x1, 0x0, 0x9, 0x100, @void}, "f37f878b068be876af70bba6e6adb5e63cc8b0e5b7d4b4654ecddc3d3716756a753ebd42d2f03768b5559bbecf2c676d60506a00c4"}}}}, 0x63) sendmsg$sock(r2, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 4.331548841s ago: executing program 2 (id=9291): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xb, 0xb}, {0x1, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x696, 0x9, 0x1, 0xc}, 0xb, 0x40000003, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x8000) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x8100, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r10, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001740)="ee5886e0b4a7667690f1667187f548b5dd806b642c598c818297305ef94826cf43347480c352a7687efd2b88142035c05e0b12bf21ce9c302aec3dad537125bf10c5d85c7af2cac9b92bb50a62c1497041f9745be39fc73b06ccc272be3d1570557eb0a831cf68944bf8d2efcbdf362cbe33092b0d78bcc9c3967b86525d47e16d8c3adda02b695bfa52f28142e759f8dbb33476c2edbb2707ee460329afe8275aca6bc1ec8ce9bd03ff0c188e2d8cb8f741800474df71d4c2a1e21a9b52b2c90a7162e2205546a2be56164b1f172a0dce32a1fd903726c08ea3dbe194aaefe465fac3a7", 0xe4}, {&(0x7f0000001840)="b792374b149f4cc5d3f155a0451609108f52206fe2441f23b1ba334d6c15b5268b4301fd805e21e7fc62f1acb0189c2786864f8af215c4c9327efb60965faa14092ae73bd93521b4c1b8cd70ef6991a33d69741e7c7e4b06e1ea98e0543698018f28ed13370d8e43fcecfbb0a1e909f6b4b2af1a3a832c56172abb1960a6f26447066f947d368188198761c4a9b7bbaa984b18f663e6dbeb1ed88fd32ceb88a6c743f303850988", 0xa7}, {&(0x7f0000001900)="814d61e8e52c537c9998f5b84a01cfef88daee9bfe1542b6953c6521e3453264f8dad438b05944c30d60e479cf5d55c288a89dec7b0dcbe43b723ef32926423c17", 0x41}, {&(0x7f0000001980)="c17c8b83f132c039d41275cc024ca0411772c061cbf34e34f6aa", 0x1a}, {&(0x7f00000019c0)="cd50cb276d31843728fdd1b4d9443f0493685a902bbe47543901d67a4b9add80e5c48f94808ac3bb1cc7d7525bd861267c6051fcb1fd90752bd7515a6734563e983cdddef8a40af954c51dce6d3fbd7fcb5f0e9aa5c842969251fb6e9d2e468e84cbaeab607d071abc6e59b673315473db64494f7f86a51820a12fcbe13498951f45ba3274e6de36ce8ec65d50cc4dfce288fc5f23289576a10b", 0x9a}], 0x5}}, {{0x0, 0x0, &(0x7f0000005500)=[{&(0x7f00000050c0)="ee0e4582ba0614e5e185ee74c1ededadbe569a96b62b925667d0a392fe8c900a119fd9c2b14e91ffa24b211a903afb6f6cdd3143f507ac024293e3923d3617e0667a5902cbfce554ef481af6057c861c627557da175c76b452bc68f081f551cc55e8c52440be9529dadcca04a4c0eabf833d9c45c8d01ee6bfaa0615590126e79a9665445056", 0x86}, {&(0x7f0000005180)="b04ec075ede0fd36f1f44707f67ac022dd7e9e53fc1fb4ad288f4155d572f2619b4ce51cd5cf0ad18e429dfd8fa80afb01f25064bc8b9f6790cf42dfa95b0c2eea70b4a435ec3b8e138d7ac5d5e03549ab05be431c31046700791a9d1ca44797", 0x60}], 0x2}}, {{0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f0000005640)="35033276e4182bf05da6dba9497609361c261aacc3f1f07b2786fa3cc11683a17d722e3035c5b73598c0835f3ebcbc15d5bf1b6f07426475348426b74e314d7b11083f2f2331a4", 0x47}, {&(0x7f00000056c0)="0cf3bbc86c3be13e049b7726659813f6e5002a95fbc60ada3a271d39af8445e7698c90d154b32e68f7037786e3e0baab8b3bf51033206fbb9b82c171950e2f951149c90d88f07d59e2c3a34d1b51ce18c051ad19138299f0db214dd0a0f2f3b733922434f0e1cba8c19d31ea7429ade0a5bce8aa8ef6613c475f37f08a1b03e37104", 0x82}, {&(0x7f0000005780)="e6afeb66137d540bb20fc2648790cd3143649ad14a4ae447e071d23877c471fce8cb00af5bff001c81e78809efa77efdb8a912894dd545c1cefa6295be21dbbecab4a74f5b49bd2014a7dd3b348417a44f6c4f8abd1f7c193a46f0ebbe444f71c66ceeac9235e92fb34a9cb158469bc9d62db26e52fe4e9a4bc3b37d9c822f0aea673a02c4324bfc638a0898ea6de844851aeaec603fb31490e0e60264f14e333333807db17277caed9f9bfa5c25947766dba10c75bfd55350f72272e7b781de95cae3d1f76d46b61e9f1d7b37b3835bccec30fd0b7fe8e0d20dc6e4dd54c5437420517e873777a935eb24dfa59c", 0xee}, {&(0x7f0000005880)="1abec9916dfc6341f205af2ddeb54033c4a8c733e1a211363dd3e77850fbcf63c394c6c0cb0f4a0c0386e79590492085d40b0bac721875e27388dc2fbafcf190d69b5a71681be3cd08117460b878f3bb42734e0dd00564dcc8c51454fd01860221bb996caac887c1af262dcfaf527916db9feda28dea3a8e8a5fe9f3e28dddaf8546cff808f818a30d6be666081ae6b8fd47133ffbc10a8345d2fd", 0x9b}, {&(0x7f0000005940)="40ee9ab1e7dc5e3b590a66b1e1", 0xd}], 0x5}}], 0x4, 0x4000011) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x801) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) close(r1) 3.014302451s ago: executing program 0 (id=9300): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900250000000005000000", 0x29}], 0x1) 2.917051874s ago: executing program 0 (id=9301): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x114}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x9}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x2}]}}}]}, 0x4c}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b15, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket(0x200000000000011, 0xa, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x800) read$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40), 0x0, 0x20044894) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x20000, 0x0, 0x1}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r8, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000fff0008000100150008"], 0x70}, 0x1, 0x0, 0x0, 0x2800}, 0x40) 2.781623456s ago: executing program 3 (id=9303): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000f80)={@in6={{0xa, 0x0, 0x1000, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x0, 0x0, "8aac4f23c59b321a1738763829f40de6514263b9b0b7023fb22bdc015174daab26ae82d6f820dd0320e82bc93d0f02bbce4b9f19d856884d638b771a2941e8ac694cb91fd1796fd3f40eb831690c6382"}, 0xd8) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xffffff, 0x0, 0x0, 0x4}, 0x10) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xfdfc, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100), 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x37924000) (async) setsockopt$inet6_tcp_int(r2, 0x11a, 0x3, &(0x7f0000000140)=0x304, 0x4) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) write(r1, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000000000200000800040001000000", 0x24) 2.725357969s ago: executing program 3 (id=9304): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@remote, @in6=@loopback}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x118, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xf3, 0x2, {{}, [@TCA_NETEM_RATE64={0xc}, @TCA_NETEM_DELAY_DIST={0xa, 0x2, "58d5c080bbdd"}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x8}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0xe}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_LOSS={0x60, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_REORDER={0xc}]}}}]}, 0x118}}, 0x0) 2.260978223s ago: executing program 2 (id=9305): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001b00)}}, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r3, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x10, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d4edcd0000006e1d0000000000000000000000000000000000000800", "b0b4e2d8157cddfb9792c8e37bafb99e7e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b00", "01acae0d00ea1443db8d53af54944d4894a87f20c65bfb8e0c9cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be314d00"}}}}}}}, 0x0) 2.25984469s ago: executing program 3 (id=9306): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c0000080001"], 0x1c}}, 0xc000) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x7, [@union={0x4, 0x2, 0x0, 0x5, 0x0, 0x7d, [{0x0, 0x4, 0x4}, {0x0, 0x2, 0x3}]}, @ptr={0x1, 0x0, 0x0, 0x2, 0x1}, @float={0x8, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x30, 0x0, 0x2e, 0x5f, 0x0]}}, &(0x7f00000002c0)=""/87, 0x5b, 0x57, 0x1, 0x9, 0x10000, @value=r4}, 0x28) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) close(r5) 1.840337458s ago: executing program 0 (id=9307): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x28, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc}]}, 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xff0000ff, 0xff0001fe, 0xff000000, 0xffffff00], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'pim6reg1\x00', 'bridge0\x00', {0xff}, {0xff}, 0x87, 0xb, 0x3, 0x3}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7ff, 0x100}}}, {{@ipv6={@remote, @private0, [0xff000000], [0xffffffff, 0x0, 0x0, 0xffffff00], 'wg1\x00', 'vlan0\x00', {}, {0xff}, 0x87, 0x0, 0x0, 0x54}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x200003, 0x4, 0x7, 0x5, 0x18, 0xa8}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x350) (async) r3 = socket$kcm(0xa, 0x1, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/14, 0xe}], 0x1, 0x10, 0x5) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$inet6(r5, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e23, 0x7a, @mcast2, 0x9}, 0x1c, 0x0, 0x62, &(0x7f0000000180)=ANY=[], 0x30}, 0x0) (rerun: 32) sendmmsg(r4, &(0x7f0000001e00)=[{{&(0x7f0000000200)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80, 0x0}}, {{&(0x7f0000000a00)=@in6={0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x80, 0x0}}], 0x2, 0x4000040) (async) setsockopt$sock_attach_bpf(r3, 0x0, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000780)={0xa, 0x0, 0xfffffffc, @mcast2, 0x2}, 0xa) sendmsg$nl_route_sched(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x12}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 1.839675722s ago: executing program 1 (id=9308): connect$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, 0x24) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf4e) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) poll(&(0x7f0000002100)=[{r0, 0x400}], 0x1, 0x2) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000000090108000000000000000000000001080005400000001c0900010073797a31000000000c000480060001"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0006"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b0b, &(0x7f0000000000)={'virt_wifi0\x00', @random='\x00\x00 \x00'}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r4 = socket(0x1a, 0xa, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f0000000000)=0xf3, 0x4) getsockopt$inet_tcp_buf(r5, 0x6, 0x18, 0x0, &(0x7f0000000340)) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000ac0)=ANY=[@ANYBLOB="03000000000000000a004e2300000009ff010000000000000000000000000001"], 0x90) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000002e80)={'gre0\x00', &(0x7f0000002e40)=@ethtool_wolinfo={0x7, 0x1, 0x1ff, "729d3031f960"}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="ac1e0001e00000020100000006000000ac1414aaac1e000100000000640101000400000000000000"], 0x28) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_proto_private(r8, 0x89e9, 0x0) 1.790098147s ago: executing program 2 (id=9309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa2981000e0086dd6d002008009c11ff20010000000000000000000000000001ff0200000000000000000000000000014f194e20009c90780100000003000000786b8afe8ef6c8e90c1e350689fcd4d61b4576015011084c54b22430637a2838563c538774ee22ce2bb8f46f7373cb97218dd5ee5af3108bd6d195c614d44230e598e0731465bf4fcdfa004c93ce4b4e02833533ce8152a09040f08bd2892b7233376dcda3f0b6962e66f6172e7c8cbccc480860f94cd609888bc51a38a461132eddc6aef8a88f02e0ed7e134f7ca5eb8bc32e4558c001c0b93fe68e004db4435fcdb3e44d60ed0e6674c7321d1f2a31b7a31605ff35fdc254c09f6bd382171b360455a0903cb168be7acd896ac0f9f8acea2bb4749b3049be7de98b104a4e4834a2f4ad63bab94d0840a6e406b339386aa163c7d0f92969fe8988362601263d1ab9277681bb756577728b3a62b7bb722100462be8c1d48a56869ddf5bc4af91518d4abd7410f8f7f4e23e2c356df3180ebe7793f3f9d0ac0900115907426e977e7a497cbe4d38b6101dd6ade776002d7103cdbb97d0a23bc552bb7b4c027ee53cae005f2c92c7bbf347f9eb1d17192ff3dc3e3a2698376d83603a5216a57e5304633fc27aabbc3ca86e5c1bd59354ef32bd212d25de14a4bc33542afc8b053c036aef3d189710bf76e7db076fa7d14192d40280e5ab0d71d38daaa288d0438500a0275adcde66c2c094d32aabd3c0e8dd78f8a4fa033a532939533d09d2dfe96f72ced5cf740d40fa7782521fd99eb88c52a5b229e01c89f31fd3256d2362498d3f6a47c8d6cf131e6fc52cb98fe6e233cc5ba2aa12a4fbc31811b0e886faefa1c66a854b630fdc4ea11d684bf588e56f6e6ee5ee2b661132848948694230f103"], 0xd6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = socket$unix(0x1, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70ad26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20004840) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0xb4, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x48, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}]}]}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x18}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3ff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffffffff}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}]}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r8, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r8, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000000)={0x0, 0xae46}, &(0x7f0000000040)=0xc) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRES16=r1, @ANYBLOB="0000000008aaaaaaaaaa00"/28], 0x34}}, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000600)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) read(r10, &(0x7f00000003c0)=""/132, 0x84) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r11) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="660a00000000000061116000000004009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x90) ioctl$sock_SIOCBRDELBR(r7, 0x89a1, &(0x7f0000000040)='vcan0\x00') 1.573128019s ago: executing program 3 (id=9310): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r1, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000002fc0)={@local, @broadcast, @val={@void, {0x8100, 0x1, 0x0, 0x4}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.491576057s ago: executing program 0 (id=9311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x86}}, 0x400c0) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, 0x2508}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r6, 0x0, r5, 0x0, 0x8000f25, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r7) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="05000000000000000000220000000a0001"], 0x20}}, 0x4000000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r11, &(0x7f0000000100)="2f183b4351", 0x5) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xa}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x5}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0x1b, 0xffffffff, 0x1, 0x0, 0x10001}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r14 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r14, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1.183722305s ago: executing program 3 (id=9312): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={0x40, r2, 0x1, 0x0, 0x4, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x7}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x40}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="af00", @ANYRES16=r2, @ANYBLOB="100026bd7000fcdbdf2506000000140006006970766c616e300000000000000000002700070073797374656d5f753a6f626a6563745f723a6465706d6f645f657865635f743a7330000014000300fe880000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4004014) 965.255574ms ago: executing program 2 (id=9313): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB="c4fcf9164984b963fba7d4e70ce2a7b3cab85cc2e28036484320a0bc469d115326d02493236256cd09a42f63756afebdec14f8de399d4ac8fbea1c0d5bbf6d50534c90ec188a6c23f234f26147ec9bb26c677a73aa0f7dba1fe09b33f8f13337197cf4a3cc22a81671963f", @ANYRES64=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRESDEC=0x0, @ANYRES32], 0x48) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r2) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fbdbdf25100000000500100083000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4c004}, 0x44000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x141}]}, 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00100000000000005400128009000100626f6e64000000004400028005001d000000000005000d000100000008000b00", @ANYRES32=0x0, @ANYBLOB="080009000300000008000900000000080000000000000000050001000000000008000200", @ANYRES32, @ANYBLOB="0a000100ff"], 0x88}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r6, @ANYBLOB="07ef28bd7000fbdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x58, r7, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x58}}, 0x20008040) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) 964.572455ms ago: executing program 3 (id=9314): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r2 = accept(r0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000005440)=[{&(0x7f0000000100)="a9", 0x1}, {&(0x7f00000005c0)="55657ce3e8a34ccb7984beafe9f3ad456f68b1dff512d2796c39a377c3ed93f7e372bd7208cd36711f237b907857ae68f3b8868fc956a3e7e318e027fce1f76e082ffdd6c55c0bdd1a7f0e7ccdf667e8be5f4004f4ddc99f3cbf41b268df3e8a54f8135a34b698e12a3403c256adadafe833b7eb76282dba34823f6709540ea891f46613a8c5d04142081c76ddbbf19105eaf2c84e17263f6d86e9bd80b61b2091e2a7d2657db4342d2191d0da0c528859f292fe83b03a0fedb747ec506475ed12b16ec0642ea070aeebc00c551f0367eb7dd87abb4bd1a36e41c02455f845ff", 0xe0}, {&(0x7f0000000740)="c316664a0a7a9f5fea5a8cf758449148af3d1bdb2988d29dba3150c58d8e2b187523d757887ce68050033e7e903f83a05f27d8aa8351e6336851ced4e138223e6a3a19182a1a52749a7a64d118f595994de0e85c1748067659a8e43141c2eb3d376bf55eafa648ed09b9c403a459a2ffff1cf6efde837697fdf7c66c94678e7ac3609a5ee9948b7d73265186461414010f43a12154739d058edf2a4313a945be7d1a6bea50bfca533fba2fd5ec74cce37b44d93fe28a350dd811493663625aa4a5301c0b3b62a24df1b75817ab7b43e2c57ae1eb3111bf4b625a3babfbe135b610842bb3ced627f674ee55a3b2b6aacb726aab0bd8ff99cfb2e369c094722e1a7a09458b9c7f7418e6c27eba2ac861a7f5fc5b7bcb200e3f18471774c1ca7a065221d26f40ffb71d598ac379b5a62742e1752d8466dd99f8f47e6a2c58704f6b1d6d12e02bc3f0cee338282af213dc20c18c232c7d43634538224953939d7d5a5d6d22dfad2ded0642340e7f874369defb531c39ebf35e7d44af2ba5590ad685e8a369c16963422580f1a40bdbfd186e70d63314cb2338034160ba496ab9d2870adc79124178ef2e7ee68d9237cc30d488d3bd53ce689ff15020b19ddd1b72a3a9d850b7596298b1dacf7931f4c3a25f9983f9bb47fba455b6d1f6e36ba38e9d177c13c316661581a21008ea932e98212d39b1e5e750158fffc8fdfd35a71dbe74373aec4ee01b10ac6dd4fac67e64f668912f84f8236932999cdd9f4b0c6f340c72b190a8edb2df1a25999fcdb45c7989035ce25cf847a36dbd00b18b6714e8a610159d33519ea64d1382d218d548c927683fb54e6c841524dc7d287e76baa03628d62ea61da24da0c51aa29725e52c9778484c687fcaa73892f99c0db25bdf02d3aaa5b5d273af81832ebbe4dcaa35acc04eec134f96aa764fc58644fe3c83a88aef5e2f1d97d27da532d23fff522068f339915a47ee49d66217ce55230967407d326cf91756a8ab142455f67f1b72c09fc82f3bcff995a8a03c0e99823e65bf34e1e350d379177b08583df880a59de0b89d6836b46ca360cc531c94d9ec163b982302a4b2a455492e9de972028a98034e771d7683edf422f6a3385c20230a27849d6be69b715aeaf2b3891a8eef35aeee5ee3a16838143a55d09481036a6cfdb5b62ab984eebb92c261b26735338652521bee9dcc20508ab6d4164446f0c3d36cf4dc35c3856ad7a296a8f0e01daf9c92a3a14fb55dbb95b73adc6c122b384e6ae8894b1f9d2432fb0caf4235f53d54305710824fca682debaf862c3348c8a2bfa079b0031e7ae39f79b89a211efd0fccb66ca19263d0f4c7f8c670bc59b08e8ad2e6be484d317de5e29f12bf0204bb5cb71e5f58949b58d6b97d5fcc040316296031927ef57a874dac170bb1f1af3cf349ad0688d6ba773552c2f6ca07af7a5acbdee025e2ea8aee5e8be8c4ad75eaf9ebf26b44a3f475facc7b05e5a633715306d07f0f34c8c49b2897fbff80bc8d2140e5678af0282be0d51f2ca92c06b1c1b17449b6e9da24423f64c3192497a5af9a9e7bce14ee848fc0975a84f4a7be8d3f69cfb9ddcdbe5fb09a95a93d585503f1ecff9ff51e06b541e2b4601429214e224c8f019477e02e570790c88bb53baa4d458192c30ae132ac9716571e9c4d6acd8b6221f5187cafbec75c74fd6f31e275efe63419425761c7f82e54c15526e6fa5d8a44e003960f6a90eb55e9f129d6d63a6689f086c47781f0516e9e05d765016cf0d308161e86929d5a0a02b1c46416738129286cc94dd4f115483599392b5178cb9e5a5460aa0891c149eb70a2b4eb2625cf6eb84da2bcb3aef12ceef21d65e409c1ec4e089950c3fb205766d3398341a079a5dd6800a9c11a3a6540f16f0490b8e0a16c30831ecd9fd1470dbf4e2ae829b55a4aa6785fd33db030602fc9b13f501f245d1d22783299e41df7f635aab5edbcadffc362970dbbb8b364ddf26ed78871f9df10ba3f5c71a395c2187f31c4b4c716cecdb1c3d80afa35896af2d506ca6f4e56cc42e514cd49de71ee69596b5882727fce51c6020e4c37d0dc25beabb36c9ff1e4ed09b8d84b035ee8c9874a12e7ff75bbd0ebd7a3168d375b1160215a03ad2281d026c42647abf3352f7684bbbb3c3502cd0cbed1a3d3a57165dec6779fa40c0b43056e1234464465f098f30b2e6f4f1c5870784e1bfa79fa759aaa6e7300ec9d2f41cf72b1f6e74aa93bc53d9e5c4525c117b08f00246d90336a16c095f32c2b1517b5730be9a1333a1c0b188f9a19a283461598a781c2678a2d0a0d0ba0e43805044898eb251a591abc1c84f3149958e99d7d183f188e4bfc062ac52184719becfa930c3c7540851dd7d562789925c0e6d96b069daa4784caf47a7b9ea23b110d1586f12f92db38059050d5de5ed2e58cd93f99c1f19dff2dd32824355030df7feb5bab4ba58cd3cd12be4aa98aa6a726cfbe18ed7525ac0b15174ca65ee0a412d87ba02eccc9e2a856e1b41e0d8f552e673d1c45e3f95e03bad8a6b1d4b9e5c0946932ce130487e654c4fb90e1fb6dd33c33c2d48a", 0x71f}], 0x3, 0x0, 0x0, 0x880}], 0x1, 0x80001) splice(r6, 0x0, r4, 0x0, 0x800, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000005000000000000000000000085000000270000001801000020646c2500000000402020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x0, 0xe, 0x0, &(0x7f0000000800)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa02, 0x0, 0x0, 0xfffffffffffffdcd, 0x0, 0x0, 0x0, 0x0, 0x620c}, 0x4c) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f00000000c0), 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r2) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r9) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000000), 0xffffff6a) sendfile(r8, r11, 0x0, 0x20000000002) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="648d5426772988dfa54d6b9705b43c32e5db4e0e18230e56d1cea464d3ce91a4a55bc3e01e77ab1ab979ce", @ANYRES16=0x0, @ANYBLOB="00042abd7000ffdbdf25020000003c00018038000400200001000a004e200000bd78fe800000000000000000000000000024050000001400020002004e24ac1e01010000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) 707.392666ms ago: executing program 1 (id=9315): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x588, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b8, 0xffffffff, 0xffffffff, 0x4b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2b, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0xff, 0xff000000, 0xffffffff], 0x4e23, 0x4e21, 0x4e22, 0x4e21, 0x100, 0x1, 0x6, 0x3ff, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x0, 0x3, 0x7, 0x265, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @empty, 0x10, 0x700, 0x8001}}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x9, 0x0, r1, 0x1, '\x00', r2, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r4, &(0x7f00000013c0)=[{&(0x7f00000001c0)="adba69b8faf1fafbc15e7fee388d121381cf70f5f5cea82140b46a3b8d7234cde6eb75f3b89d275bd9ed38ec804a94c3c637ed69c4c04b7ad6ea2908ac095e0f", 0x40}], 0x1, 0xf) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0x0, '\x00', 0x0, r4}, 0x50) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback=r1, 0xc67a00a78be42dd5, 0x0, 0x80, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@alu={0x7, 0x0, 0x1, 0x9, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) 672.235816ms ago: executing program 2 (id=9316): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4f23, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)={0xa, 0x4e23, 0x800, @empty, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000780)=ANY=[], 0x30}}], 0x2, 0x20) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0xd0f, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000020000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000040)=0xfff9, &(0x7f0000000100)=0x2) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000002, 0x10110, r0, 0xd4831000) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x1945, 0x4) sendmmsg$inet6(r2, &(0x7f00000000c0), 0x1, 0x800) recvfrom(r2, 0x0, 0x1200, 0x12000, 0x0, 0x0) 584.632758ms ago: executing program 0 (id=9317): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001000ff03000000003800000000000000", @ANYRES32=0x0, @ANYBLOB="a7bda888000000001800128008000100677265000c00028005000a0001000000"], 0x38}}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x28, 0x4) connect$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r7 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffe}, {0x16, 0x0, 0x0, 0xfffffffc}]}, 0x10) sendto$inet6(r7, &(0x7f00000002c0)="1d0000001200050f0c6ecd826849000000000a00080001c000000001", 0x1c, 0x20040001, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) socket$inet6(0xa, 0x802, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001000ff03000000003800000000000000", @ANYRES32=0x0, @ANYBLOB="a7bda888000000001800128008000100677265000c00028005000a0001000000"], 0x38}}, 0x0) (async) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x28, 0x4) (async) connect$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) socket$inet6(0x10, 0x2, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffe}, {0x16, 0x0, 0x0, 0xfffffffc}]}, 0x10) (async) sendto$inet6(r7, &(0x7f00000002c0)="1d0000001200050f0c6ecd826849000000000a00080001c000000001", 0x1c, 0x20040001, 0x0, 0x0) (async) 584.296344ms ago: executing program 1 (id=9318): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x86}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0x8c, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xe0, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r5}, 0x38) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0x0, 0x7}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x1d, 0x1a, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x0, 0x1, 0x0, 0x0, 0x7, 0x20, 0x10}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x4, 0x49, &(0x7f0000000280)=""/73, 0x41000, 0x24, '\x00', r1, 0x1b, r2, 0x8, &(0x7f0000000380)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xa, 0xffffff4a, 0x8}, 0x10, r4, 0x0, 0x6, &(0x7f00000007c0)=[r5, r6, r7], &(0x7f0000000800)=[{0x2, 0x5, 0x10, 0xb}, {0x0, 0x4, 0xb5cf, 0x3}, {0x5, 0x5, 0xc, 0x8}, {0x5, 0x3, 0x9, 0xb}, {0x3, 0x3, 0x5}, {0x1, 0x3, 0x2, 0x2}], 0x10, 0x9}, 0x94) 477.321561ms ago: executing program 1 (id=9319): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB="04020101"], 0x8) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000071120800000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000080)=0xffff0001) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000080)=ANY=[], 0x7) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200048cc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x1, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r9, 0x8004}, 0x8) getsockopt$bt_hci(r6, 0x84, 0x3, &(0x7f0000001080)=""/4057, &(0x7f0000004240)=0xfd9) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r10, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 358.711238ms ago: executing program 2 (id=9320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="011b25bd7000fddbdf250500000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000630109000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10010}, 0x94) r3 = socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r3) sendmsg$TIPC_NL_NODE_GET(r3, 0x0, 0x4011) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0xa, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="3de6", 0x2}], 0x1}}], 0x1, 0x48819) sendto$inet6(r4, &(0x7f0000000400)="25eed0aee8c79f49b53c108367401019c41e56367aa3f23916ddf42df6a5ca47adc0f14939ee362a401f6425b5933ed45ac2e4089f33e87ea4fa53cb6f37fa25746f5805cefb6f78a3d525962f72cff39e3fd9074e3260c84fdfced1c00ba3c8cfcd6220a22b568b9ea6d0e366394ae3490b19d046c22e484b0aa11954836b45d4047ab5007b7b758a16f51f05661f02e1cc365db0bf3b54c3c468a8b5462008bc5ffb9d", 0xa4, 0x4000, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/158, 0x9e, 0x1, 0x0}, &(0x7f0000000180)=0x40) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x4b, 0x0, 0x1}, 0xc) sendmsg$alg(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="f31a73d4f0ce30b5503ff8efc3a8f9ea2d95fac6a6e4669a742cda799f6b738a899021ff67eae087ddfe7dbd41ea9d9641313ffba67fcf46c54a32f96722a8c5ccdbddb12899ae2566c2ea97cf663d96aa457dd4d2fea8c0a6a7ed089429c1992e82432ef4681e3946ec7c11569fb8cf0172e85603413e6d470d79d5b7e759714976c6ef39", 0x85}, {&(0x7f0000000180)="c057dc4b8072ace928cdcbf2130daa859ebe7fcd1952bf15eedb7e7b9b68ba9a7ae3228d093515c29ea1b9a1be31b33d856eaacff4209a04a167f133944c8bea09643ecd9041e56792db8888e40315fe7a102b3df4cffb6e822c8cf6ac981156cf4dea899ae8ed30825c56f05f2fe95d6553a15e744d512566f204f9a9f87e4beed72efd32f6ee07af358ca5ccb230f60d735300235828ce6dc36cfd6dc03f3ee60c61c0", 0xa4}, {&(0x7f0000000280)="b1e819da3355d36a151b0927dcb3c1c57bba0edce90b4cea65b6e15521412822fb53d8a738f8a68dbbbdc8748c2ae263f5ba366755638a32579c1e70a632f11ce19cc892e3b0943ec9be9be661a9bb97f10f053737f947c30b279c27b31a8332f2", 0x61}, {&(0x7f0000000300)="c0af5320577f057b77f65f685eb18ec1b5dbc9502839d696cbdb342f183d4cd4f36b7fdabb6ea39fa0d7150bec6fffef5bb0200cdc3690eb5c7aba6f0b26048bf44cea242f3e04cc8d2cf87d04fda01a71a697e35bc457f968a4c33558b7ab4c673b67ee5cbf93eaba53bb205c9d364838b08df373ce25ce6a95878d5ba7c11df098ffd89448de355569e45230bad007e2628904aa8aa56de2d388bdde043c06f4d28050e00eed262286fcbfc968a411368e864798fc81375e4f5dffbb2e48dbb894f123c2", 0xc5}, {&(0x7f0000000400)="990a52ae1515c7ac9807295cddfbb6b7373524cc918ab5fd0d3ac924a68476980f12a57ba671bdc8f9ce901b1bc83b58274c4651", 0x34}, {&(0x7f0000000440)="00deb7c88e89555a958ed6c349ffce4db6ee595e79861a699c4bde34f512a42f6293b3838af7d027de2af59ccd5d9b817ac95c8ab820a8eab5f63f90e40d5f5755f29cee8e54e9b066a243d42bb9", 0x4e}, {&(0x7f00000004c0)}, {&(0x7f0000000500)="8fe4861b4f4dffd9e2a6d1c9922d7f501d811a442512bb63d923333526e7cff501693fe120f4f0687ebffe56d7066a64cb79e178f4", 0x35}, {&(0x7f0000000540)="8b2ec398f5b13d24e9e1f987abc6964e4ce50c4258ece578887ebab6e361b2cef73f0a9133b28de3d61f2ef877c10b", 0x2f}], 0x9}, 0x50) 478.179µs ago: executing program 1 (id=9321): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x9, 0x6a, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000440)={r0, 0x0, &(0x7f0000000400)=""/55}, 0x20) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) (async) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c44000000000000"], 0x0}, 0x94) (async) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0xf, "0476bc4b4c9e3e260cbfad9904"}, @timestamp_addr={0x44, 0x14, 0xb, 0x1, 0x0, [{@multicast1}, {@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x50) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r7 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$nci(r8, &(0x7f0000000540)=ANY=[@ANYRES8=r3, @ANYRESDEC=r8], 0xffffffffffffff65) 0s ago: executing program 0 (id=9322): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000b00)={'gre0\x00', &(0x7f0000000a00)={'tunl0\x00', 0x0, 0x10, 0x10, 0x1, 0xf095, {{0x32, 0x4, 0x0, 0x7, 0xc8, 0x65, 0x0, 0x80, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2b}, {[@noop, @cipso={0x86, 0x81, 0x1, [{0x2, 0x6, "edbeca76"}, {0x0, 0x12, "48d3e28b8384ca532cd0d1101cf4c8d4"}, {0x4, 0x3, "af"}, {0x0, 0x5, "e70525"}, {0x5, 0xa, "b978326b8b54bc90"}, {0x2, 0x12, "11371c8ef9b4341d0aa50eacbbf70458"}, {0x7, 0xe, "2294d54daa3f9ee33e60d043"}, {0x7, 0x3, 'h'}, {0x6, 0xf, "72c4596904abea6d9ea6847da4"}, {0x1, 0xd, "d00bd5c9dabe86444f53ee"}, {0x2, 0xf, "ac474466e2fce2220a8f6ac567"}, {0x2, 0x3, "d6"}]}, @lsrr={0x83, 0xb, 0x59, [@rand_addr=0x64010102, @local]}, @timestamp_prespec={0x44, 0x24, 0xbf, 0x3, 0x4, [{@broadcast, 0xfffffff8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@loopback, 0x4}]}]}}}}}) (async, rerun: 32) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000001040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) (rerun: 32) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@bloom_filter={0x1e, 0x3, 0x6, 0x10000000, 0x8, r0, 0x80000000, '\x00', r2, r3, 0x0, 0x5, 0x3, 0x8}, 0x50) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 32) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, 0x0) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x58, 0x82, &(0x7f0000000000)="76ab4d7439fab01e6f6c7a35645c93ab80c6570ecead6f77a8ccd9612e8338998424b48c0ce84eb34227d688db5c1e4c15d44b7b0bf7e9ca7bea703db989e6e5a36521ae82fd760c629c0c82e785cfbb743a2b9a183a8185", &(0x7f00000004c0)=""/130, 0x4, 0x0, 0x0, 0x2c, &(0x7f0000000580), &(0x7f00000005c0)="ebaf7d3be30149c302e1dc7bdf2c56ac5115d280ffb44fbca0318d79247fd6b56d949c8bb2b02e89b6f615af", 0x1, 0x0, 0x80000041}, 0x50) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}]}]}]}, 0x38}}, 0x0) (async, rerun: 32) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0d00000004000000040000000c00000000000000", @ANYRES32=r0, @ANYBLOB="00000000000000000000080000000000000000003c85af3473e4b119c4cb37f516afbb20405ecb424a0c599198fc5f448f9bf2b8c11cd3e5cf85320da43149c6d2a54797a24af81fe30000000000000000001f8c1d7b8815a3c1a70f3e3c5b4f6f70f5a6d8cd8b44f160eff737f8d82a9902d669d1a264339c2cb971162ddc172edbc7489f22590d9d75c82b5b4c8b2194fc225cb5e73089b85013393712b739483cde723163114489f6f9a2a63e4401ed22453ad6ea2242effb28ffa1bd99c01ee06942f23acd9768fb4596c19cab1adf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async, rerun: 32) r14 = socket$l2tp6(0xa, 0x2, 0x73) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000bc0)=@abs, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000c40)=""/193, 0xc1}, {&(0x7f0000000d40)=""/1, 0x1}, {&(0x7f0000000d80)=""/128, 0x80}, {&(0x7f0000000e00)=""/244, 0xf4}, {&(0x7f0000000f00)=""/139, 0x8b}], 0x5, &(0x7f0000001040)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}, 0x140) (async, rerun: 64) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, &(0x7f00000008c0)=0xe8) (rerun: 64) setsockopt$inet6_IPV6_XFRM_POLICY(r14, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@empty, @in6=@mcast1, 0x4e23, 0xa8ed, 0x4e22, 0xffff, 0xa, 0x0, 0x20, 0xb7, r15, r16}, {0x8, 0x6, 0xb, 0xffffffffffff6f2c, 0xffffffff, 0x8001, 0x80, 0x1}, {0xb2, 0x7, 0x8}, 0x753, 0x6e6bb5, 0x1, 0x1, 0x1}, {{@in6=@private0, 0x4d2, 0x32}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3502, 0x4, 0x0, 0x7, 0x7, 0x8, 0xffc}}, 0xe8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): C1] vcan0: j1939_tp_rxtimer: 0xffff8880a29f5400: abort rx timeout. Force session deactivation [ 1001.162197][ T2266] syz_tun: entered promiscuous mode [ 1001.175079][ T2266] syz_tun: entered allmulticast mode [ 1001.196002][ T2267] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7827'. [ 1001.226212][ T2272] openvswitch: netlink: nsh attribute has 5 unknown bytes. [ 1001.283226][ T2275] netlink: 'syz.4.7833': attribute type 1 has an invalid length. [ 1001.332124][ T2275] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1001.360996][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a0e2000: abort rx timeout. Force session deactivation [ 1001.440235][ T2275] bond5: (slave veth5): Enslaving as an active interface with a down link [ 1001.864370][ T6137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.279248][ T2325] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7849'. [ 1002.328657][ T2325] vlan2: entered allmulticast mode [ 1002.340797][ T2325] gretap0: entered allmulticast mode [ 1002.365939][ T2329] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7850'. [ 1002.461402][ T2330] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7849'. [ 1002.482825][ T2336] netlink: 'syz.3.7852': attribute type 1 has an invalid length. [ 1002.515617][ T2330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7849'. [ 1002.525787][ T2336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7852'. [ 1002.551028][ T2339] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1002.768069][ T2350] ±ÿª¨úrBº“: renamed from lo [ 1002.968290][ T2359] netlink: 'syz.0.7860': attribute type 1 has an invalid length. [ 1002.994267][ T6137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.016702][ T2362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7861'. [ 1003.140118][ T2365] bond12: (slave bridge4): Enslaving as a backup interface with an up link [ 1003.173855][ T2362] netlink: 'syz.1.7861': attribute type 1 has an invalid length. [ 1003.196738][ T2362] netlink: 'syz.1.7861': attribute type 2 has an invalid length. [ 1003.666129][ T2400] hsr0: entered allmulticast mode [ 1003.674083][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.682677][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.691306][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.709058][ T2400] hsr_slave_0: entered allmulticast mode [ 1003.729261][ T2400] hsr_slave_1: entered allmulticast mode [ 1003.737832][ T2402] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7870'. [ 1003.777203][ T2396] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7870'. [ 1003.884510][ T2407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7872'. [ 1003.906128][ T2406] xt_cgroup: invalid path, errno=-2 [ 1003.927521][ T2406] xt_cgroup: invalid path, errno=-2 [ 1003.949243][ T2406] xt_cgroup: invalid path, errno=-2 [ 1003.973150][ T2406] xt_cgroup: invalid path, errno=-2 [ 1003.997376][ T2406] xt_cgroup: invalid path, errno=-2 [ 1004.013802][ T2406] xt_cgroup: invalid path, errno=-2 [ 1004.039089][ T2406] xt_cgroup: invalid path, errno=-2 [ 1004.064211][ T2406] xt_cgroup: invalid path, errno=-2 [ 1004.092347][ T2420] netlink: 'syz.0.7874': attribute type 27 has an invalid length. [ 1004.101295][ T2406] xt_cgroup: invalid path, errno=-2 [ 1004.120768][ T2406] xt_cgroup: invalid path, errno=-2 [ 1004.136915][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.336740][ T2436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7883'. [ 1004.603126][ T2452] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1004.947296][ T2473] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1004.970940][ T2473] syzkaller1: linktype set to 823 [ 1005.253739][ T146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.410311][ T2491] netem: change failed [ 1005.963588][ T2516] Bluetooth: MGMT ver 1.23 [ 1006.359244][ T2520] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1006.385357][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.528027][T16227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.590968][ T2575] __nla_validate_parse: 7 callbacks suppressed [ 1007.590990][ T2575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7914'. [ 1008.006597][ T2586] bond6: option packets_per_slave: invalid value (18446744073709551615) [ 1008.052499][ T2586] bond6: option packets_per_slave: allowed values 0 - 65535 [ 1008.078383][ T2586] bond6 (unregistering): Released all slaves [ 1008.191325][ T2604] netlink: 'syz.3.7921': attribute type 1 has an invalid length. [ 1008.691939][ T2634] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7927'. [ 1008.702302][T16227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.751954][ T2638] netlink: 'syz.4.7927': attribute type 33 has an invalid length. [ 1009.136899][ T2653] netlink: 27 bytes leftover after parsing attributes in process `syz.1.7929'. [ 1009.436113][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.444770][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.835344][T16227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.106091][ T2719] SET target dimension over the limit! [ 1010.224034][ T2725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7943'. [ 1010.235275][ T2726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7943'. [ 1010.778219][ T2744] netlink: 71 bytes leftover after parsing attributes in process `syz.0.7947'. [ 1010.957821][T16226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.089029][ T2772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7953'. [ 1011.204418][ T2774] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20003 [ 1011.260019][ T2778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1011.966768][ T2819] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.7963'. [ 1011.976828][ T2824] netlink: 'syz.3.7964': attribute type 1 has an invalid length. [ 1012.006317][ T2826] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7966'. [ 1012.118743][T16226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.164807][ T2839] netlink: 'syz.3.7968': attribute type 32 has an invalid length. [ 1012.172984][ T2839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7968'. [ 1012.207853][ T2842] netlink: 'syz.1.7969': attribute type 49 has an invalid length. [ 1012.343038][ T2839] bond8: Setting coupled_control to on (1) [ 1012.488972][ T2866] x_tables: duplicate underflow at hook 2 [ 1012.718827][ T2881] netem: change failed [ 1012.758547][ T2881] __nla_validate_parse: 2 callbacks suppressed [ 1012.758569][ T2881] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.7980'. [ 1012.836224][ T2897] set match dimension is over the limit! [ 1013.253134][T16226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.420650][ T2928] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.7991'. [ 1013.440683][ T2932] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7989'. [ 1013.458307][ T2931] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.7991'. [ 1013.639837][ T2935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7992'. [ 1013.699745][ T2940] netlink: 'syz.1.7992': attribute type 21 has an invalid length. [ 1013.709183][ T2940] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7992'. [ 1013.757687][ T2941] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1013.892636][ T2948] netlink: 1116 bytes leftover after parsing attributes in process `syz.0.7996'. [ 1013.938718][ T2950] netlink: 161920 bytes leftover after parsing attributes in process `syz.2.7997'. [ 1014.228009][ T2965] netlink: 146836 bytes leftover after parsing attributes in process `syz.3.8003'. [ 1014.369260][ T2974] netlink: 'syz.0.8007': attribute type 1 has an invalid length. [ 1014.414850][T30509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.473683][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.482245][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.499622][ T2987] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8009'. [ 1014.518307][ T2991] netlink: 'syz.2.8008': attribute type 1 has an invalid length. [ 1014.578670][ T2991] netlink: 'syz.2.8008': attribute type 3 has an invalid length. [ 1014.610037][ T2974] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1014.638194][ T2994] geneve2: entered promiscuous mode [ 1014.765806][ T2998] sctp: [Deprecated]: syz.4.8014 (pid 2998) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1014.765806][ T2998] Use struct sctp_sack_info instead [ 1014.799934][ T2998] sctp: [Deprecated]: syz.4.8014 (pid 2998) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1014.799934][ T2998] Use struct sctp_sack_info instead [ 1014.819084][ T2999] sctp: [Deprecated]: syz.0.8013 (pid 2999) Use of int in maxseg socket option. [ 1014.819084][ T2999] Use struct sctp_assoc_value instead [ 1014.869837][ T3004] IPVS: set_ctl: invalid protocol: 100 172.20.20.187:20003 [ 1014.892928][ T3004] sctp: [Deprecated]: syz.2.8015 (pid 3004) Use of int in max_burst socket option deprecated. [ 1014.892928][ T3004] Use struct sctp_assoc_value instead [ 1015.024272][ T3010] netlink: 'syz.0.8018': attribute type 1 has an invalid length. [ 1015.138323][ T3009] vlan1: left allmulticast mode [ 1015.305347][ T3016] vlan2: entered allmulticast mode [ 1015.332949][ T3016] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1015.376534][ T3021] bond9: (slave veth0_to_bond): Releasing backup interface [ 1015.563655][T30511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.025588][ T3061] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1016.143235][ T3067] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1016.391678][ T3073] bond6: option all_slaves_active: invalid value (222) [ 1016.404499][ T3082] netlink: 'syz.2.8044': attribute type 1 has an invalid length. [ 1016.413277][ T3073] bond6 (unregistering): Released all slaves [ 1016.617917][ T3095] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1016.694922][T16230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.746563][ T3095] bond5 (unregistering): Released all slaves [ 1016.828181][ T3111] openvswitch: netlink: IPv4 tun info is not correct [ 1017.100529][ T3123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1017.181233][ T3132] xt_hashlimit: size too large, truncated to 1048576 [ 1017.334066][ T3137] netlink: 'syz.3.8057': attribute type 1 has an invalid length. [ 1017.665826][ T3162] netlink: 'syz.3.8064': attribute type 1 has an invalid length. [ 1017.718092][ T3168] netlink: 'syz.0.8067': attribute type 1 has an invalid length. [ 1017.791726][ T3172] __nla_validate_parse: 10 callbacks suppressed [ 1017.791748][ T3172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8068'. [ 1017.813717][T30508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.825489][ T3173] netlink: 'syz.0.8067': attribute type 1 has an invalid length. [ 1018.010462][ T3178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8069'. [ 1018.043011][ T3181] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8070'. [ 1018.088835][ T3183] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8072'. [ 1018.238235][ T3189] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8074'. [ 1018.256289][ T3189] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8074'. [ 1018.278253][ T3189] gretap0: entered promiscuous mode [ 1018.287547][ T3189] gretap0: left promiscuous mode [ 1018.345048][ T3194] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8075'. [ 1018.387093][ T3194] syzkaller0: entered promiscuous mode [ 1018.392639][ T3194] syzkaller0: entered allmulticast mode [ 1018.447146][ T3194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8075'. [ 1018.756174][ T3223] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8080'. [ 1018.780637][ T3223] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8080'. [ 1018.841019][ T3228] netlink: 'syz.2.8082': attribute type 1 has an invalid length. [ 1018.887116][ T3230] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1018.924824][ T146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.797025][ T3278] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1020.054295][T16227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.323929][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.332516][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.409784][ T3312] netlink: zone id is out of range [ 1020.417730][ T3312] netlink: zone id is out of range [ 1020.424272][ T3312] netlink: zone id is out of range [ 1020.430015][ T3312] netlink: zone id is out of range [ 1020.436791][ T3312] netlink: zone id is out of range [ 1020.864556][ T3336] netlink: 'syz.3.8114': attribute type 10 has an invalid length. [ 1020.875700][ T3336] syz_tun: entered promiscuous mode [ 1020.898457][ T3336] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1021.606422][ T3371] netlink: 'syz.4.8125': attribute type 1 has an invalid length. [ 1021.896189][ T3383] sctp: [Deprecated]: syz.0.8130 (pid 3383) Use of int in maxseg socket option. [ 1021.896189][ T3383] Use struct sctp_assoc_value instead [ 1022.937997][ T3432] __nla_validate_parse: 43 callbacks suppressed [ 1022.938020][ T3432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8143'. [ 1023.152622][ T3440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8146'. [ 1023.212150][ T3443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8146'. [ 1023.279399][ T3438] mac80211_hwsim hwsim84 syzkaller0: entered promiscuous mode [ 1023.289257][ T3438] mac80211_hwsim hwsim84 syzkaller0: entered allmulticast mode [ 1023.676217][ T3465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8157'. [ 1023.715304][ T3465] netlink: 'syz.3.8157': attribute type 1 has an invalid length. [ 1023.724143][ T3466] netlink: 'syz.3.8157': attribute type 1 has an invalid length. [ 1023.732402][ T3462] netlink: 'syz.1.8156': attribute type 1 has an invalid length. [ 1023.774760][ T3462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8156'. [ 1024.327986][ T3485] netlink: 'syz.4.8162': attribute type 1 has an invalid length. [ 1024.356604][ T3485] netlink: 'syz.4.8162': attribute type 1 has an invalid length. [ 1024.394514][ T3485] netlink: 'syz.4.8162': attribute type 1 has an invalid length. [ 1024.433437][ T3485] netlink: 'syz.4.8162': attribute type 1 has an invalid length. [ 1024.494878][T30508] net_ratelimit: 59 callbacks suppressed [ 1024.494901][T30508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.699497][ T3487] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8163'. [ 1024.775105][ T3488] syzkaller0: entered promiscuous mode [ 1024.802136][ T3488] syzkaller0: entered allmulticast mode [ 1025.131071][ T3509] netlink: 'syz.4.8167': attribute type 13 has an invalid length. [ 1025.357035][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.366777][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.645133][ T146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.880603][ T3524] : entered promiscuous mode [ 1025.995438][ T3524] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8170'. [ 1026.256607][ T3535] syzkaller1: entered promiscuous mode [ 1026.276759][ T3535] syzkaller1: entered allmulticast mode [ 1026.541286][ T3546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8177'. [ 1026.625867][ T3549] netlink: 'syz.1.8179': attribute type 29 has an invalid length. [ 1026.637603][ T3549] netlink: 'syz.1.8179': attribute type 29 has an invalid length. [ 1026.784232][T30511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.799446][ T3552] mac80211_hwsim hwsim80 syzkaller0: left promiscuous mode [ 1026.822238][ T3552] mac80211_hwsim hwsim80 syzkaller0: left allmulticast mode [ 1026.863094][ T3549] netlink: 596 bytes leftover after parsing attributes in process `syz.1.8179'. [ 1026.902774][ T3560] netlink: 'syz.4.8178': attribute type 10 has an invalid length. [ 1026.940497][ T3560] dummy0: entered allmulticast mode [ 1026.962746][ T3560] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1027.104953][ T3562] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8181'. [ 1027.126428][ T3562] netlink: 'syz.3.8181': attribute type 3 has an invalid length. [ 1027.139274][ T3562] netlink: 'syz.3.8181': attribute type 3 has an invalid length. [ 1027.381460][ T3571] mac80211_hwsim hwsim80 syzkaller0: entered allmulticast mode [ 1027.862274][ T3589] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 1027.925232][T16226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.748134][ T3623] __nla_validate_parse: 1 callbacks suppressed [ 1028.748155][ T3623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8196'. [ 1028.811703][ T3623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8196'. [ 1029.174293][ T146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.047084][ T3648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8202'. [ 1030.284224][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.427287][ T3576] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1030.553706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.562310][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.819989][ T3656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8205'. [ 1030.830541][ T3656] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1031.016430][ T3662] veth3: entered allmulticast mode [ 1031.249852][ T3674] gretap1: entered promiscuous mode [ 1031.268784][ T3674] batman_adv: batadv0: Adding interface: gretap1 [ 1031.308724][ T3674] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 1031.358104][ T3674] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1031.394279][ T146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.445815][ T3683] validate_nla: 2 callbacks suppressed [ 1031.445863][ T3683] netlink: 'syz.2.8211': attribute type 4 has an invalid length. [ 1031.487979][ T3688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8215'. [ 1031.526549][ T3688] openvswitch: netlink: Flow actions attr not present in new flow. [ 1031.655374][ T3688] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8215'. [ 1031.678512][ T3688] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8215'. [ 1032.260332][ T3712] x_tables: duplicate underflow at hook 1 [ 1032.467391][ T3718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8223'. [ 1032.504884][T16226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.117597][ T3736] netlink: get zone limit has 4 unknown bytes [ 1033.314537][ T3743] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8230'. [ 1033.375797][ T3738] policy can only be matched on NF_INET_PRE_ROUTING [ 1033.375855][ T3738] unable to load match [ 1033.558922][ T3749] netlink: 'syz.3.8233': attribute type 1 has an invalid length. [ 1033.591092][ T3749] netlink: 228 bytes leftover after parsing attributes in process `syz.3.8233'. [ 1033.655474][ T6125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.819046][ T3749] xt_HMARK: spi-set and port-set can't be combined [ 1034.263018][ T3771] syzkaller0: entered promiscuous mode [ 1034.269842][ T3771] syzkaller0: entered allmulticast mode [ 1034.387756][ T3773] __nla_validate_parse: 1 callbacks suppressed [ 1034.387777][ T3773] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8239'. [ 1034.897469][T16226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.987048][ T3786] netlink: 'syz.1.8241': attribute type 1 has an invalid length. [ 1035.136432][ T3786] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1035.182988][ T3795] bond7: entered promiscuous mode [ 1035.189047][ T3795] bond7: entered allmulticast mode [ 1035.197798][ T3797] tap0: tun_chr_ioctl cmd 2148553947 [ 1035.231607][ T3796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8246'. [ 1035.279726][ T3802] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8245'. [ 1035.314289][ T3802] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8245'. [ 1035.428750][ T3801] : entered promiscuous mode [ 1035.489560][ T3811] tun0: tun_chr_ioctl cmd 1074025675 [ 1035.529265][ T3811] tun0: persist disabled [ 1035.584657][ T3812] tun0: tun_chr_ioctl cmd 1074025675 [ 1035.608779][ T3812] tun0: persist disabled [ 1035.671987][ T3817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8250'. [ 1035.898647][ T3824] netlink: 'syz.1.8252': attribute type 1 has an invalid length. [ 1036.044862][ T146] net_ratelimit: 1 callbacks suppressed [ 1036.044881][ T146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.165913][T27292] Bluetooth: hci1: command 0x0405 tx timeout [ 1036.184006][ T3832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8253'. [ 1036.199795][ T3824] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1036.217681][ T3832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8253'. [ 1036.313684][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.322256][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.339847][ T3836] netlink: 'syz.2.8255': attribute type 1 has an invalid length. [ 1036.550223][ T3841] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8256'. [ 1036.568303][ T3849] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8258'. [ 1036.648570][ T3850] xt_limit: Overflow, try lower: 271964/0 [ 1036.781047][ T3850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8257'. [ 1036.883002][ T3848] ve: renamed from veth0_vlan [ 1037.178041][ T146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.541837][ T3866] nbd: must specify an index to disconnect [ 1037.998398][ T3891] netlink: 'syz.2.8266': attribute type 1 has an invalid length. [ 1038.190372][ T3896] netlink: 'syz.1.8267': attribute type 1 has an invalid length. [ 1038.278408][ T3896] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1038.351175][ T3904] vlan3: entered promiscuous mode [ 1038.358022][ T3904] bond9: entered promiscuous mode [ 1038.364720][ T6137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.379243][ T3904] vlan3: entered allmulticast mode [ 1038.401188][ T3904] bond9: entered allmulticast mode [ 1039.500022][ T6128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.675071][ T5637] Bluetooth: hci1: command 0x0405 tx timeout [ 1039.765416][ T30] audit: type=1804 audit(1781293353.048:19): pid=3947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.8274" name="/newroot/480/cgroup.controllers" dev="tmpfs" ino=2474 res=1 errno=0 [ 1039.897391][ T30] audit: type=1800 audit(1781293353.078:20): pid=3947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8274" name="cgroup.controllers" dev="tmpfs" ino=2474 res=0 errno=0 [ 1039.987185][ T3950] x_tables: duplicate underflow at hook 2 [ 1040.482045][ T3965] tun0: tun_chr_ioctl cmd 1074025675 [ 1040.508410][ T3965] tun0: persist enabled [ 1040.532709][ T5292] ve: left promiscuous mode [ 1040.601008][ T5292] ve: entered promiscuous mode [ 1040.718757][ T3965] tun0: tun_chr_ioctl cmd 1074025675 [ 1040.746759][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.752162][ T3965] tun0: persist disabled [ 1041.019428][ T3979] __nla_validate_parse: 4 callbacks suppressed [ 1041.019482][ T3979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8282'. [ 1041.709775][ T4006] netlink: 'syz.3.8289': attribute type 7 has an invalid length. [ 1041.857349][ T4006] netlink: 'syz.3.8289': attribute type 7 has an invalid length. [ 1041.904712][T16230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.074945][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.084671][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.457820][ T4020] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1042.530229][ T4020] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1042.594049][ T4020] gretap1: entered promiscuous mode [ 1042.651001][ T4020] gretap1: entered allmulticast mode [ 1042.719447][ T4025] tipc: Enabling of bearer rejected, failed to enable media [ 1042.845821][ T4031] syz_tun: entered allmulticast mode [ 1043.045698][ T6128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.416481][ T4061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8300'. [ 1043.998823][ T4081] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8306'. [ 1044.198268][ T146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.185097][ T4132] netlink: 'syz.3.8314': attribute type 9 has an invalid length. [ 1045.225136][ T4132] netlink: 'syz.3.8314': attribute type 6 has an invalid length. [ 1045.258228][ T4134] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8316'. [ 1045.269279][ T4132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8314'. [ 1045.308038][ T4134] netlink: 'syz.0.8316': attribute type 21 has an invalid length. [ 1045.334928][T16226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.359105][ T4134] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8316'. [ 1046.236557][ T4173] netlink: 'syz.2.8327': attribute type 1 has an invalid length. [ 1046.256235][ T4173] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8327'. [ 1046.286403][ T4173] netlink: 'syz.2.8327': attribute type 1 has an invalid length. [ 1046.310477][ T4173] netlink: 'syz.2.8327': attribute type 8 has an invalid length. [ 1046.343090][ T4173] netlink: 606 bytes leftover after parsing attributes in process `syz.2.8327'. [ 1046.379717][ T4173] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8327'. [ 1046.476081][T16228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.684126][ T4184] IPVS: ip_vs_add_dest(): server weight less than zero [ 1046.738241][ T4184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8330'. [ 1046.869906][ T4188] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1047.636108][T16227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.833769][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.842388][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.946282][ T4217] x_tables: duplicate underflow at hook 2 [ 1048.097291][ T4227] netlink: 'syz.3.8341': attribute type 9 has an invalid length. [ 1048.149691][ T6128] bond0: (slave bond_slave_0): interface is now down [ 1048.196240][ T6128] bond0: (slave bond_slave_1): interface is now down [ 1048.236462][ T6128] bond0: (slave syz_tun): interface is now down [ 1048.381957][ T6128] bond0: now running without any active interface! [ 1048.519180][ T4236] netlink: 'syz.1.8345': attribute type 4 has an invalid length. [ 1048.529577][ T4237] netlink: 'syz.1.8345': attribute type 4 has an invalid length. [ 1048.835618][T16227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.980058][ T4253] syz.3.8347: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1049.032821][ T4253] CPU: 0 UID: 0 PID: 4253 Comm: syz.3.8347 Not tainted syzkaller #0 PREEMPT(full) [ 1049.032855][ T4253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1049.032869][ T4253] Call Trace: [ 1049.032879][ T4253] [ 1049.032890][ T4253] dump_stack_lvl+0xe8/0x150 [ 1049.032922][ T4253] warn_alloc+0x249/0x340 [ 1049.032954][ T4253] ? stack_trace_save+0xa9/0x100 [ 1049.032988][ T4253] ? __pfx_warn_alloc+0x10/0x10 [ 1049.033033][ T4253] ? kasan_save_track+0x4f/0x80 [ 1049.033060][ T4253] ? kasan_save_track+0x3e/0x80 [ 1049.033104][ T4253] ? __kasan_kmalloc+0x93/0xb0 [ 1049.033132][ T4253] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1049.033161][ T4253] ? xskq_create+0x56/0x170 [ 1049.033191][ T4253] ? xsk_setsockopt+0x54c/0x990 [ 1049.033218][ T4253] ? do_sock_setsockopt+0x17c/0x1b0 [ 1049.033249][ T4253] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1049.033279][ T4253] ? do_syscall_64+0x174/0x580 [ 1049.033303][ T4253] __vmalloc_node_range_noprof+0x132/0x1750 [ 1049.033368][ T4253] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1049.033406][ T4253] ? __kasan_kmalloc+0x93/0xb0 [ 1049.033443][ T4253] vmalloc_user_noprof+0xad/0xe0 [ 1049.033473][ T4253] ? xskq_create+0xbf/0x170 [ 1049.033505][ T4253] xskq_create+0xbf/0x170 [ 1049.033540][ T4253] xsk_init_queue+0x8a/0xe0 [ 1049.033573][ T4253] xsk_setsockopt+0x54c/0x990 [ 1049.033604][ T4253] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1049.033632][ T4253] ? __pfx_aa_sk_perm+0x10/0x10 [ 1049.033790][ T4253] ? aa_sock_opt_perm+0xff/0x1a0 [ 1049.033847][ T4253] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1049.033875][ T4253] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1049.033906][ T4253] do_sock_setsockopt+0x17c/0x1b0 [ 1049.033942][ T4253] __x64_sys_setsockopt+0x13d/0x1b0 [ 1049.033976][ T4253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.034007][ T4253] do_syscall_64+0x174/0x580 [ 1049.034030][ T4253] ? clear_bhb_loop+0x40/0x90 [ 1049.034056][ T4253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.034078][ T4253] RIP: 0033:0x7efc71f9ce59 [ 1049.034098][ T4253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1049.034115][ T4253] RSP: 002b:00007efc72de6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1049.034138][ T4253] RAX: ffffffffffffffda RBX: 00007efc72215fa0 RCX: 00007efc71f9ce59 [ 1049.034154][ T4253] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1049.034166][ T4253] RBP: 00007efc72032d6f R08: 0000000000000004 R09: 0000000000000000 [ 1049.034180][ T4253] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1049.034193][ T4253] R13: 00007efc72216038 R14: 00007efc72215fa0 R15: 00007ffd30d5f308 [ 1049.034228][ T4253] [ 1049.342454][ T4253] Mem-Info: [ 1049.346564][ T4253] active_anon:5700 inactive_anon:4 isolated_anon:0 [ 1049.346564][ T4253] active_file:3204 inactive_file:40337 isolated_file:0 [ 1049.346564][ T4253] unevictable:768 dirty:35 writeback:0 [ 1049.346564][ T4253] slab_reclaimable:13318 slab_unreclaimable:140808 [ 1049.346564][ T4253] mapped:29266 shmem:1293 pagetables:1370 [ 1049.346564][ T4253] sec_pagetables:0 bounce:0 [ 1049.346564][ T4253] kernel_misc_reclaimable:0 [ 1049.346564][ T4253] free:1263355 free_pcp:24232 free_cma:0 [ 1049.407535][ T4253] Node 0 active_anon:22900kB inactive_anon:16kB active_file:12816kB inactive_file:161144kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:108872kB dirty:140kB writeback:0kB shmem:3636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17844kB pagetables:5332kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1049.472769][ T4253] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8192kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1049.505688][ T4253] Node 0 DMA free:11264kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1049.535552][ T4253] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1049.541384][ T4253] Node 0 DMA32 free:1173572kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22800kB inactive_anon:16kB active_file:12816kB inactive_file:161144kB unevictable:1536kB writepending:140kB zspages:0kB present:3129332kB managed:2552776kB mlocked:0kB bounce:0kB free_pcp:35724kB local_pcp:17872kB free_cma:0kB [ 1049.592854][ T4253] lowmem_reserve[]: 0 0 0 0 0 [ 1049.597659][ T4253] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1049.626917][ T4253] lowmem_reserve[]: 0 0 0 0 0 [ 1049.631704][ T4253] Node 1 Normal free:3868584kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:61208kB local_pcp:32744kB free_cma:0kB [ 1049.664021][ T4253] lowmem_reserve[]: 0 0 0 0 0 [ 1049.668794][ T4253] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB [ 1049.681515][ T4253] Node 0 DMA32: 9514*4kB (UME) 7626*8kB (UME) 4350*16kB (UME) 261*32kB (UME) 108*64kB (UME) 622*128kB (UME) 785*256kB (UME) 385*512kB (UME) 268*1024kB (UM) 116*2048kB (UM) 0*4096kB = 1173624kB [ 1049.730869][ T4253] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1049.742635][ T4253] Node 1 Normal: 3*4kB (U) 5*8kB (UM) 13*16kB (UM) 10*32kB (UM) 9*64kB (UM) 9*128kB (UM) 9*256kB (UM) 7*512kB (UM) 6*1024kB (UM) 4*2048kB (U) 939*4096kB (UM) = 3868676kB [ 1049.767577][ T4253] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1049.786531][ T4253] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1049.828753][ T4253] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1049.838363][ T4253] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1049.874136][ T4253] 44830 total pagecache pages [ 1049.878892][ T4253] 0 pages in swap cache [ 1049.883080][ T4253] Free swap = 124996kB [ 1049.887274][ T4253] Total swap = 124996kB [ 1049.997266][ T4269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8355'. [ 1050.021519][ T4253] 2097051 pages RAM [ 1050.025394][ T4253] 0 pages HighMem/MovableOnly [ 1050.030112][ T4253] 427072 pages reserved [ 1050.034302][ T4253] 0 pages cma reserved [ 1050.050511][ T4279] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8355'. [ 1050.266155][T16230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.287580][ T4290] netlink: 116 bytes leftover after parsing attributes in process `syz.3.8358'. [ 1050.580313][ T4310] bond6: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1051.039209][ T4321] syzkaller1: entered promiscuous mode [ 1051.047783][ T4321] syzkaller1: entered allmulticast mode [ 1051.287827][ T4337] bond11 (unregistering): Released all slaves [ 1051.410946][ T4332] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1051.430838][ T4332] bond11 (unregistering): Released all slaves [ 1051.575463][ T4350] netlink: 'syz.2.8372': attribute type 1 has an invalid length. [ 1051.735369][T16230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.766185][ T4361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8379'. [ 1051.783054][ T4367] netlink: 'syz.4.8380': attribute type 3 has an invalid length. [ 1051.848079][ T4371] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8380'. [ 1051.857296][ T4371] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8380'. [ 1051.950584][ T4372] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8379'. [ 1052.052476][ T4375] netlink: 'syz.4.8382': attribute type 1 has an invalid length. [ 1052.113145][ T4379] bond0: Caught tx_queue_len zero misconfig [ 1052.163101][ T4381] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8384'. [ 1052.453124][ T4388] z0 speed is unknown, defaulting to 1000 [ 1052.460740][ T4388] xfrm0 speed is unknown, defaulting to 1000 [ 1052.834145][ T4388] xfrm0 speed is unknown, defaulting to 1000 [ 1052.947960][ T4405] netlink: 'syz.3.8391': attribute type 1 has an invalid length. [ 1052.973354][ T6128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.031602][ T4405] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1053.158888][ T4412] netlink: 'syz.4.8392': attribute type 3 has an invalid length. [ 1053.166691][ T4412] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8392'. [ 1053.236873][ T4415] netlink: 'syz.4.8392': attribute type 3 has an invalid length. [ 1053.245117][ T4415] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8392'. [ 1053.314249][ T4412] openvswitch: netlink: Unknown key attributes 2 [ 1053.321115][ T4412] openvswitch: netlink: Unknown key attributes 2 [ 1053.348791][ T4422] netlink: 'syz.3.8396': attribute type 1 has an invalid length. [ 1053.356584][ T4422] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8396'. [ 1053.365663][ T4422] netlink: 'syz.3.8396': attribute type 1 has an invalid length. [ 1053.373422][ T4422] netlink: 'syz.3.8396': attribute type 8 has an invalid length. [ 1053.381179][ T4422] netlink: 606 bytes leftover after parsing attributes in process `syz.3.8396'. [ 1053.390316][ T4422] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8396'. [ 1053.593890][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.602485][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.727734][ T4433] veth0: entered promiscuous mode [ 1053.764266][ T4432] veth0: left promiscuous mode [ 1054.291492][ T4470] netlink: 'syz.2.8415': attribute type 1 has an invalid length. [ 1054.319007][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1054.422656][ T146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.899523][ T4494] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20004 [ 1055.544226][T16227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.669345][ T4537] ip6t_REJECT: ECHOREPLY is not supported [ 1055.706393][ T4539] Cannot find add_set index 0 as target [ 1056.325790][ T4576] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1056.357688][ T4577] netlink: 'syz.2.8442': attribute type 11 has an invalid length. [ 1056.754177][T16226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.934315][ T4612] geneve3: entered allmulticast mode [ 1057.317819][ T4624] lo: entered allmulticast mode [ 1057.323700][ T4624] tunl0: entered allmulticast mode [ 1057.344168][ T4624] gre0: entered allmulticast mode [ 1057.461165][ T4624] gretap0: entered allmulticast mode [ 1057.491596][ T4624] ip_vti0: entered allmulticast mode [ 1057.540967][ T4624] ip6_vti0: entered allmulticast mode [ 1057.550320][ T4624] sit0: entered allmulticast mode [ 1057.614629][ T4624] ip6tnl0: entered allmulticast mode [ 1057.653745][ T4634] validate_nla: 2 callbacks suppressed [ 1057.653765][ T4634] netlink: 'syz.3.8457': attribute type 21 has an invalid length. [ 1057.667108][ T4634] __nla_validate_parse: 9 callbacks suppressed [ 1057.667127][ T4634] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8457'. [ 1057.705647][ T4624] ip6gre0: entered allmulticast mode [ 1057.733040][ T4642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8458'. [ 1057.742394][ T4642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8458'. [ 1057.759175][ T4624] syz_tun: left promiscuous mode [ 1058.088328][ T4658] netlink: 11 bytes leftover after parsing attributes in process `syz.2.8464'. [ 1058.112173][T16226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.167253][ T4665] nbd: couldn't find a device at index 1048580 [ 1058.465109][ T4665] vlan0 (unregistering): left allmulticast mode [ 1058.471545][ T4665] ve (unregistering): left allmulticast mode [ 1059.332378][T16227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.354100][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.362614][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.425980][ T4701] netlink: 'syz.0.8475': attribute type 2 has an invalid length. [ 1059.447729][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.619180][ T4709] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1059.751492][ T4715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8478'. [ 1059.764483][ T4715] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8478'. [ 1060.252989][ T4744] netlink: 10184 bytes leftover after parsing attributes in process `syz.3.8488'. [ 1060.262375][ T4744] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8488'. [ 1060.320388][ T4749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8490'. [ 1060.370936][ T4749] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1060.432832][ T4749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8490'. [ 1060.578138][ T4759] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1060.595061][ T4755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1060.670939][ T146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.871521][ T4763] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.075559][ T4780] syz.4.8501 (4780) used obsolete PPPIOCDETACH ioctl [ 1061.146412][ T4775] ip_vti0: entered promiscuous mode [ 1061.920010][T16228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.428159][ T4846] syzkaller0: entered promiscuous mode [ 1062.461488][ T4846] syzkaller0: entered allmulticast mode [ 1062.500082][ T4846] openvswitch: netlink: IP tunnel dst address not specified [ 1062.539713][ T4859] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 1063.137254][ T4885] __nla_validate_parse: 3 callbacks suppressed [ 1063.137273][ T4885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8524'. [ 1063.272496][ T4891] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.8526'. [ 1063.347203][T16226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.605221][ T4897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8531'. [ 1063.627768][ T4897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8531'. [ 1064.494599][T16230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.116489][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.124927][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.647887][ T146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.525046][ T4885] bond0: (slave team0): Releasing backup interface [ 1066.606527][ T4885] team0 (unregistering): Port device team_slave_0 removed [ 1066.635932][ T4885] team0 (unregistering): Port device team_slave_1 removed [ 1066.751070][ T4911] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8537'. [ 1067.345627][T16230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.734403][ T4976] netlink: 'syz.0.8552': attribute type 1 has an invalid length. [ 1067.742699][ T4976] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8552'. [ 1067.768949][ T4988] netlink: 116 bytes leftover after parsing attributes in process `syz.1.8556'. [ 1067.822633][ T4988] openvswitch: netlink: Geneve option length err (len 317, max 255). [ 1067.916861][ T4990] netlink: 766 bytes leftover after parsing attributes in process `syz.4.8557'. [ 1068.030890][ T4998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8559'. [ 1068.131098][ T4983] netlink: 10184 bytes leftover after parsing attributes in process `syz.3.8553'. [ 1068.154164][ T5004] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1068.172282][ T5004] IPVS: length: 143 != 24 [ 1068.451233][ T5023] xt_TCPMSS: Only works on TCP SYN packets [ 1068.761935][ T5036] __nla_validate_parse: 1 callbacks suppressed [ 1068.761956][ T5036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8570'. [ 1068.780315][T16226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.947506][ T5039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8572'. [ 1068.979033][ T5048] x_tables: ip_tables: MASQUERADE target: only valid in nat table, not [ 1069.815270][ T5101] netlink: 'syz.0.8587': attribute type 1 has an invalid length. [ 1070.007493][T16226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.108967][ T30] audit: type=1107 audit(1781293383.388:21): pid=5114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 1070.131286][ T5115] netlink: 'syz.1.8594': attribute type 13 has an invalid length. [ 1070.174649][ T5115] gretap0: refused to change device tx_queue_len [ 1070.189976][ T5115] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1070.211194][ T5117] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8596'. [ 1070.233844][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.242468][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.395879][ T5122] xt_hashlimit: size too large, truncated to 1048576 [ 1070.435381][ T5124] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8598'. [ 1070.522062][ T5128] netlink: zone id is out of range [ 1070.527258][ T5128] netlink: zone id is out of range [ 1070.532465][ T5128] netlink: zone id is out of range [ 1070.537705][ T5128] netlink: zone id is out of range [ 1070.542892][ T5128] netlink: zone id is out of range [ 1070.700030][ T5136] macvtap0: entered allmulticast mode [ 1070.739645][ T5136] veth0_macvtap: entered allmulticast mode [ 1070.850936][ T5143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8605'. [ 1070.866975][ T5144] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1070.958310][ T5144] netlink: 'syz.0.8604': attribute type 1 has an invalid length. [ 1070.966111][ T5144] netlink: 244 bytes leftover after parsing attributes in process `syz.0.8604'. [ 1071.089077][ T5154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8607'. [ 1071.119043][ T5154] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8607'. [ 1071.297178][ T5159] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8610'. [ 1071.320296][ T5162] netlink: 112 bytes leftover after parsing attributes in process `syz.4.8611'. [ 1071.649314][ T5176] netlink: 'syz.1.8616': attribute type 11 has an invalid length. [ 1072.916567][ T5219] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1073.942332][ T5278] __nla_validate_parse: 2 callbacks suppressed [ 1073.942353][ T5278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8639'. [ 1073.958080][ T5278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8639'. [ 1074.189297][ T5296] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.8646'. [ 1074.246783][ T146] net_ratelimit: 51 callbacks suppressed [ 1074.246803][ T146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.322192][ T5307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8647'. [ 1074.411291][ T5302] bond0: entered promiscuous mode [ 1074.452281][ T5302] bond_slave_0: entered promiscuous mode [ 1074.479625][ T5302] bond_slave_1: entered promiscuous mode [ 1074.489263][ T5313] netlink: 'syz.0.8650': attribute type 27 has an invalid length. [ 1074.567918][ T5317] vlan0: entered promiscuous mode [ 1074.616534][ T5312] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.8649'. [ 1074.764509][ T5323] netlink: 'syz.3.8653': attribute type 12 has an invalid length. [ 1074.793569][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1075.052557][ T5337] xt_hashlimit: size too large, truncated to 1048576 [ 1075.118395][ T5341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8659'. [ 1075.127994][ T5341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8659'. [ 1075.469002][ T5354] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8662'. [ 1075.601875][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.610419][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.623373][T16230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.641094][ T5362] mac80211_hwsim hwsim80 syzkaller0: left allmulticast mode [ 1075.846767][ T30] audit: type=1107 audit(1781293389.128:22): pid=5372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ͦ/ªœ¾ ¹v9ø5¡P›µÉ"½ø¶:d~‹EÕ—®ãûe§A [ 1075.846767][ T30] ÂVP¦³p?‘‹{HÃR¦#J¶õÊìIzÐ gÿ¯ž ð÷+¹ç€r¾W¹–fÖâ [ 1075.846767][ T30] ANîòsJƒÎWç?x@/z+Ëœ„€âä‡Î;³¡)yq–ï i?Ãk¯þÒdšù [ 1075.846767][ T30] w0U}ò¢Y~ʤµ'ÁÏl¼æ|‰ëGÂ)4ñ ‘£®~MWeU' [ 1075.889701][ T5378] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8667'. [ 1075.931575][ T30] audit: type=1107 audit(1781293389.128:23): pid=5372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ͦ/ªœ¾ ¹v9ø5¡P›µÉ"½ø¶:d~‹EÕ—®ãûe§A [ 1075.931575][ T30] ÂVP¦³p?‘‹{HÃR¦#J¶õÊìIzÐ gÿ¯ž ð÷+¹ç€r¾W¹–fÖâ [ 1075.931575][ T30] ANîòsJƒÎWç?x@/z+Ëœ„€âä‡Î;³¡)yq–ï i?Ãk¯þÒdšù [ 1075.931575][ T30] w0U}ò¢Y~ʤµ'ÁÏl¼æ|‰ëGÂ)4ñ ‘£®~MWeU' [ 1076.033521][ T5390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8671'. [ 1076.501312][ T5394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1076.550873][ T5405] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 1076.587470][ T5405] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 1076.764338][ T5424] pim6reg: entered allmulticast mode [ 1076.834510][ T146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.230232][ T5454] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20002 [ 1077.708570][ T5478] netlink: 'syz.0.8692': attribute type 1 has an invalid length. [ 1077.759210][ T5483] netlink: 'syz.2.8694': attribute type 1 has an invalid length. [ 1077.899256][ T5478] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1077.973603][ T5485] bond6: (slave bridge7): Enslaving as a backup interface with an up link [ 1078.032372][ T5483] macvlan2: entered promiscuous mode [ 1078.039182][ T5483] macvlan2: entered allmulticast mode [ 1078.047349][ T5483] bond6: entered promiscuous mode [ 1078.059622][ T5483] bridge7: entered promiscuous mode [ 1078.075588][ T5483] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1078.137592][ T5483] bond6: left promiscuous mode [ 1078.148458][ T5483] bridge7: left promiscuous mode [ 1078.401470][T16228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.900113][ T5525] veth1_macvtap: left promiscuous mode [ 1079.114108][ T5533] __nla_validate_parse: 7 callbacks suppressed [ 1079.114128][ T5533] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.8707'. [ 1079.208506][ T5538] netlink: 'syz.2.8709': attribute type 1 has an invalid length. [ 1079.220255][ T5541] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1079.233856][ T5541] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8711'. [ 1079.415425][ T5545] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8713'. [ 1079.619601][ T146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.703947][ T5558] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8718'. [ 1079.712976][ T5558] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8718'. [ 1079.810130][ T5558] erspan0: entered promiscuous mode [ 1079.816827][ T5558] gretap0: entered promiscuous mode [ 1079.825599][ T5558] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 1080.097901][ T5578] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 1080.183924][ T5578] dvmrp0: entered allmulticast mode [ 1080.387126][ T5585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8725'. [ 1080.452954][ T5585] netlink: 'syz.2.8725': attribute type 8 has an invalid length. [ 1080.624116][ T5595] netlink: 'syz.0.8728': attribute type 9 has an invalid length. [ 1080.731630][ T5601] pimreg3: entered allmulticast mode [ 1080.881078][ T5610] macvlan2: entered promiscuous mode [ 1080.887889][ T5610] macvlan2: entered allmulticast mode [ 1080.915474][ T5614] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8734'. [ 1080.944984][ T5614] bond0: (slave dummy0): Releasing backup interface [ 1080.954822][ T5614] dummy0 (unregistering): left allmulticast mode [ 1081.020195][ T5621] netlink: 'syz.0.8737': attribute type 4 has an invalid length. [ 1081.092533][T16230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.193920][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.202565][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.324779][ T5641] xt_hashlimit: size too large, truncated to 1048576 [ 1081.399285][ T5644] ip6gre0: Master is either lo or non-ether device [ 1081.470039][ T5654] netlink: 'syz.4.8746': attribute type 3 has an invalid length. [ 1081.478015][ T5654] netlink: 666 bytes leftover after parsing attributes in process `syz.4.8746'. [ 1081.692150][ T5661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8749'. [ 1081.712621][ T5662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8748'. [ 1081.725132][ T5662] : left promiscuous mode [ 1081.800046][ T5667] mac80211_hwsim hwsim72 wlan0: entered promiscuous mode [ 1081.887453][ T5674] openvswitch: netlink: IP tunnel dst address not specified [ 1082.328320][T16230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.424996][ T5697] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1082.432388][ T5697] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1082.843068][ T5732] syzkaller0: entered promiscuous mode [ 1082.848675][ T5732] syzkaller0: entered allmulticast mode [ 1083.515995][ T146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.851354][ T5797] netlink: 'syz.2.8784': attribute type 1 has an invalid length. [ 1084.246977][ T5813] __nla_validate_parse: 3 callbacks suppressed [ 1084.246999][ T5813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8788'. [ 1084.264317][ T5813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8788'. [ 1084.552278][ T5813] macsec1: entered promiscuous mode [ 1084.558260][ T5813] bridge0: entered promiscuous mode [ 1084.563713][ T5813] macsec1: entered allmulticast mode [ 1084.569036][ T5813] bridge0: entered allmulticast mode [ 1084.576152][ T5818] syzkaller0: entered promiscuous mode [ 1084.581648][ T5818] syzkaller0: entered allmulticast mode [ 1084.602229][ T5826] mac80211_hwsim hwsim80 syzkaller0: entered promiscuous mode [ 1084.610398][ T5826] mac80211_hwsim hwsim80 syzkaller0: entered allmulticast mode [ 1084.618151][ T5834] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8789'. [ 1084.644102][ T5834] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8789'. [ 1084.787958][ T5836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8794'. [ 1084.830468][ T5839] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8796'. [ 1084.860834][ T5839] netlink: 'syz.2.8796': attribute type 11 has an invalid length. [ 1084.948647][ T5848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8799'. [ 1084.949908][ T5853] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8800'. [ 1084.974632][ T5848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8799'. [ 1085.006201][T16228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.029462][ T5854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8799'. [ 1085.541025][ T5877] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1085.929481][ T5895] sctp: [Deprecated]: syz.4.8814 (pid 5895) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1085.929481][ T5895] Use struct sctp_sack_info instead [ 1086.015323][ T5899] openvswitch: netlink: IP tunnel TTL not specified. [ 1086.040201][ T5899] netlink: 'syz.3.8815': attribute type 1 has an invalid length. [ 1086.097056][ T5901] sctp: [Deprecated]: syz.1.8818 (pid 5901) Use of int in max_burst socket option. [ 1086.097056][ T5901] Use struct sctp_assoc_value instead [ 1086.138764][ T5901] IPVS: Error connecting to the multicast addr [ 1086.145116][ T5899] bond0: Error: Cannot enslave bond to itself. [ 1086.155250][ T5907] openvswitch: netlink: IPv4 tun info is not correct [ 1086.167226][ T5907] syz_tun: refused to change device tx_queue_len [ 1086.534177][T16227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.699913][ T5937] bond0: Error: Cannot enslave bond to itself. [ 1086.734565][ T5940] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1087.029908][ T5954] netlink: 'syz.3.8833': attribute type 1 has an invalid length. [ 1087.048428][ T5954] team0: Port device team_slave_0 removed [ 1087.084501][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.093073][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.619715][ T5990] netlink: 'syz.4.8845': attribute type 1 has an invalid length. [ 1087.719899][ T5997] syzkaller0: entered promiscuous mode [ 1087.725451][ T5997] syzkaller0: entered allmulticast mode [ 1087.869155][ T6128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.970806][ T6014] bridge_slave_1: left allmulticast mode [ 1087.979392][ T6014] bridge_slave_1: left promiscuous mode [ 1087.988293][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.037354][ T6014] bond0: (slave bond_slave_0): Releasing backup interface [ 1088.062671][ T6014] bond_slave_0: left promiscuous mode [ 1088.071367][ T6018] netlink: 'syz.3.8853': attribute type 23 has an invalid length. [ 1088.110618][ T6014] bond0: (slave bond_slave_1): Releasing backup interface [ 1088.120815][ T6014] bond_slave_1: left promiscuous mode [ 1088.135082][ T6020] netlink: 'syz.0.8857': attribute type 2 has an invalid length. [ 1088.159480][ T6014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1088.176149][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1088.186616][ T6014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1088.196726][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1088.243509][ T6014] bond3: (slave gretap1): Releasing active interface [ 1088.263662][ T6014] bond6: (slave bridge7): Releasing backup interface [ 1089.198045][T16227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.401830][ T6074] x_tables: duplicate underflow at hook 1 [ 1089.448976][ T6076] xt_l2tp: v2 doesn't support IP mode [ 1089.472102][ T6076] pim6reg: entered allmulticast mode [ 1089.620082][ T6087] x_tables: unsorted underflow at hook 2 [ 1089.706274][ T6092] __nla_validate_parse: 51 callbacks suppressed [ 1089.706299][ T6092] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8875'. [ 1089.754277][T27292] Bluetooth: hci2: command 0x0405 tx timeout [ 1089.906342][T30511] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x59 [ 1090.352209][ T6122] netlink: 'syz.1.8884': attribute type 39 has an invalid length. [ 1090.577743][ T146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.588948][ T6149] netlink: 'syz.0.8890': attribute type 21 has an invalid length. [ 1090.606599][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8890'. [ 1090.661692][ T146] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 1090.674427][ T6149] netlink: 'syz.0.8890': attribute type 21 has an invalid length. [ 1090.687416][ T146] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 1090.702208][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8890'. [ 1090.716219][ T146] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 1090.743638][T16227] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 1090.851790][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8894'. [ 1090.959336][ T6165] netlink: 'syz.2.8897': attribute type 1 has an invalid length. [ 1090.968985][ T6165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8897'. [ 1090.979969][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8895'. [ 1090.988885][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8895'. [ 1091.232131][ T6178] bridge5: entered allmulticast mode [ 1091.369931][ T6189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8904'. [ 1091.425376][ T6192] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8905'. [ 1091.460196][ T6194] vlan2: entered allmulticast mode [ 1091.466927][ T6194] bond0: entered allmulticast mode [ 1091.958938][ T6233] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8917'. [ 1091.993742][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.002397][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.127108][ T6245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1092.156639][ T6243] netlink: 'syz.4.8920': attribute type 9 has an invalid length. [ 1092.166027][ T6243] netlink: 'syz.4.8920': attribute type 6 has an invalid length. [ 1092.295363][T16227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.586359][ T6091] udevd[6091]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1093.041435][ T6296] Unknown options in mask b7f2 [ 1093.060048][ T6295] netlink: 'syz.2.8933': attribute type 7 has an invalid length. [ 1093.107469][ T6295] netlink: 'syz.2.8933': attribute type 8 has an invalid length. [ 1093.439643][T27292] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1093.503081][ T6311] netlink: 'syz.2.8938': attribute type 1 has an invalid length. [ 1093.583233][ T6311] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1093.639941][ T6320] bond7: (slave team_slave_0): Enslaving as a backup interface with an up link [ 1093.941569][ T146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.965151][ T6338] netlink: 'syz.1.8943': attribute type 49 has an invalid length. [ 1093.981411][ T6326] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 1094.181146][ T5637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1094.212523][ T5637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1094.228154][ T5637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1094.237678][ T5637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1094.246401][ T5637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1094.325256][ T6338] ip6gretap0: entered promiscuous mode [ 1094.330803][ T6338] ip6gretap0: entered allmulticast mode [ 1094.733861][ T6363] __nla_validate_parse: 12 callbacks suppressed [ 1094.733882][ T6363] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8948'. [ 1094.842799][ T6333] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1095.071927][ T6371] netlink: 'syz.4.8949': attribute type 10 has an invalid length. [ 1095.084406][ T6371] veth1_macvtap: left promiscuous mode [ 1095.140859][ T6371] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 1095.148945][ T6374] IPVS: set_ctl: invalid protocol: 3 127.0.0.1:20000 [ 1095.209081][ T6387] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8952'. [ 1095.223262][ T6385] tipc: Enabling of bearer rejected, failed to enable media [ 1095.245206][ T6343] z0 speed is unknown, defaulting to 1000 [ 1095.257571][ T6343] xfrm0 speed is unknown, defaulting to 1000 [ 1095.463760][ T6394] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8954'. [ 1095.478615][T16227] veth3: left allmulticast mode [ 1095.483542][T16227] veth3: left promiscuous mode [ 1095.488562][T16227] bridge3: port 1(veth3) entered disabled state [ 1095.563560][T16227] veth5: left allmulticast mode [ 1095.568506][T16227] veth5: left promiscuous mode [ 1095.573523][T16227] bridge5: port 1(veth5) entered disabled state [ 1095.656880][ T6403] block nbd6: Unsupported socket: should be TCP or UNIX. [ 1095.749629][ T6128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.761818][ T6403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8956'. [ 1096.209300][T16227] team0: Port device xfrm0 removed [ 1096.323454][ T5637] Bluetooth: hci3: command tx timeout [ 1096.362671][T16227] bond11 (unregistering): (slave geneve5): Releasing active interface [ 1096.377212][T16227] bond10 (unregistering): (slave geneve4): Releasing active interface [ 1096.412409][T16227] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1097.159679][T16228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.176344][T16227] bond5 (unregistering): (slave bridge7): Releasing backup interface [ 1097.264537][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.273079][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.450579][ T5637] Bluetooth: hci3: command tx timeout [ 1098.560856][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.586050][T16227] bond13 (unregistering): (slave bridge12): Releasing active interface [ 1098.675356][T16227] bond1 (unregistering): Released all slaves [ 1098.692098][T16227] bond2 (unregistering): Released all slaves [ 1098.708126][T16227] bond3 (unregistering): Released all slaves [ 1098.729724][T16227] bond4 (unregistering): Released all slaves [ 1098.748600][T16227] bond5 (unregistering): Released all slaves [ 1098.781480][T16227] bond0 (unregistering): Released all slaves [ 1098.802860][T16227] bond6 (unregistering): Released all slaves [ 1098.825610][T16227] bond7 (unregistering): Released all slaves [ 1098.848949][T16227] bond8 (unregistering): (slave 2z0): Releasing backup interface [ 1098.857357][T16227] bond8 (unregistering): (slave 2z0): last VLAN challenged slave left bond - VLAN blocking is removed [ 1098.870102][T16227] bond8 (unregistering): Released all slaves [ 1098.908318][T16227] bond9 (unregistering): (slave veth13): Releasing active interface [ 1098.919275][T16227] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1098.933711][T16227] bond9 (unregistering): (slave veth15): Releasing active interface [ 1098.943828][T16227] bond9 (unregistering): Released all slaves [ 1098.961877][T16227] bond10 (unregistering): Released all slaves [ 1098.984268][T16227] bond11 (unregistering): Released all slaves [ 1099.021779][T16227] bond12 (unregistering): Released all slaves [ 1099.051577][T16227] bond13 (unregistering): Released all slaves [ 1099.074144][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8956'. [ 1099.094395][ T6403] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8956'. [ 1099.137698][ T6403] veth1_to_bridge: entered allmulticast mode [ 1099.144320][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8956'. [ 1099.153222][ T6403] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8956'. [ 1099.192809][ T6429] xt_ecn: cannot match TCP bits for non-tcp packets [ 1099.225283][ T6343] xfrm0 speed is unknown, defaulting to 1000 [ 1099.231415][ T6422] tipc: Enabling of bearer rejected, already enabled [ 1099.262636][ T10] z0 speed is unknown, defaulting to 1000 [ 1099.268476][ T10] syú2: Port: 1 Link DOWN [ 1099.272882][ T809] z0 speed is unknown, defaulting to 1000 [ 1099.398141][ T6437] tipc: Enabling of bearer rejected, failed to enable media [ 1099.758606][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8964'. [ 1099.812570][ T6445] gretap1: entered promiscuous mode [ 1099.944550][ T6445] batman_adv: batadv0: Adding interface: gretap1 [ 1099.950971][ T6445] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 1099.970641][ T6445] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1100.122128][ T6444] tipc: Resetting bearer [ 1100.163728][T16228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.254204][T16227] tipc: Disabling bearer [ 1100.276832][T16227] tipc: Disabling bearer [ 1100.294482][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8969'. [ 1100.303428][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8969'. [ 1100.316353][T16227] tipc: Left network mode [ 1100.415408][T16227] IPVS: stopping backup sync thread 19392 ... [ 1100.555562][ T5637] Bluetooth: hci3: command tx timeout [ 1100.603970][ T6444] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1100.609954][ T6444] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1100.741722][ T6487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8971'. [ 1100.742004][ T6444] tipc: Resetting bearer [ 1100.966417][ T6493] netlink: 'syz.2.8971': attribute type 5 has an invalid length. [ 1100.974231][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8971'. [ 1101.070462][ T6444] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1101.083282][ T6444] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1101.509523][ T6343] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.518469][ T6444] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1101.538639][ T6444] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1101.546756][ T6343] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.558597][ T6343] bridge_slave_0: entered allmulticast mode [ 1101.572961][ T6343] bridge_slave_0: entered promiscuous mode [ 1101.676623][T16228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.785424][ T6343] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.818104][ T6343] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.843841][ T6343] bridge_slave_1: entered allmulticast mode [ 1101.859419][ T6343] bridge_slave_1: entered promiscuous mode [ 1101.900337][ T6444] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1101.962323][ T6444] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1101.992784][ T6343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1102.016166][ T6343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1102.279061][ T6528] SET target dimension over the limit! [ 1102.306583][ T6534] netlink: 'syz.4.8977': attribute type 1 has an invalid length. [ 1102.326459][ T6343] team0: Port device team_slave_0 added [ 1102.367463][ T6343] team0: Port device team_slave_1 added [ 1102.378635][ T6534] netlink: 'syz.4.8977': attribute type 3 has an invalid length. [ 1102.386431][ T6534] netlink: 172 bytes leftover after parsing attributes in process `syz.4.8977'. [ 1102.395485][ T6534] NCSI netlink: No device for ifindex 813332851 [ 1102.458277][ T6527] bond11: entered promiscuous mode [ 1102.475170][ T6527] bond11: entered allmulticast mode [ 1102.486562][ T6527] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1102.561888][ T6343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1102.575637][ T6343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1102.627553][ T6343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1102.645308][ T6343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1102.682207][ T6343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1102.708481][ T6343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1102.873669][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.882279][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.890816][ T6343] hsr_slave_0: entered promiscuous mode [ 1102.897574][ T6343] hsr_slave_1: entered promiscuous mode [ 1102.903933][ T6343] debugfs: 'hsr0' already exists in 'hsr' [ 1102.909696][ T6343] Cannot create hsr debugfs directory [ 1103.108672][ T6550] SET target dimension over the limit! [ 1103.145208][ T6550] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8979'. [ 1103.177396][T16228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.744571][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8984'. [ 1103.973136][ T6343] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1104.034311][ T6343] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1104.049183][ T6585] netlink: 'syz.4.8987': attribute type 1 has an invalid length. [ 1104.076886][ T6343] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.365451][ T6585] bond7: entered promiscuous mode [ 1104.383584][ T6585] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1104.515288][ T6128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.532970][ T6595] bond7: (slave bridge6): making interface the new active one [ 1104.577925][ T6595] bridge6: entered promiscuous mode [ 1104.607512][ T6595] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 1104.765245][ T6602] netlink: 'syz.2.8989': attribute type 8 has an invalid length. [ 1104.917472][ T6343] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1104.937686][ T6343] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1104.951826][ T6343] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.234268][ T6343] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1105.245963][ T6343] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1105.260014][ T6343] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.556388][ T6625] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 1105.651604][ T6627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8995'. [ 1105.679386][ T6343] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1105.690185][ T6343] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1105.701199][ T6343] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.979283][ T6635] netlink: 'syz.3.8996': attribute type 1 has an invalid length. [ 1106.030600][ T6635] netlink: 232 bytes leftover after parsing attributes in process `syz.3.8996'. [ 1106.094758][T30511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.333054][ T6642] netlink: 'syz.2.8998': attribute type 10 has an invalid length. [ 1106.575252][ T6343] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1106.602815][ T6343] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1106.646141][ T6343] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1106.665160][ T6662] netlink: 'syz.3.9001': attribute type 1 has an invalid length. [ 1106.681974][ T6662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9001'. [ 1106.719376][ T6343] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1106.805803][ T6343] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1106.897750][ T6343] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1106.912615][ T6343] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1107.011660][ T6343] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1107.388523][ T6691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9007'. [ 1107.400802][T16227] hsr_slave_0: left promiscuous mode [ 1107.439029][T16227] hsr_slave_1: left promiscuous mode [ 1107.462004][T16227] veth1_vlan: left promiscuous mode [ 1107.476402][T16227] veth0_vlan: left promiscuous mode [ 1107.537107][T30511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.556694][ T6696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9007'. [ 1107.822211][T16227] pim6reg (unregistering): left allmulticast mode [ 1107.885177][ T6711] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9007'. [ 1107.908127][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9007'. [ 1108.024986][T16227] pim6reg527 (unregistering): left allmulticast mode [ 1108.650029][T16227] smc: removing net device team0 with user defined pnetid SYZ2 [ 1108.704998][ T6691] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 1108.708524][T30509] smbdirect: ib_dev[syú2] removed [ 1108.884746][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.893288][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.972879][ T6343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1109.031475][ T6742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9012'. [ 1109.064174][ T6343] 8021q: adding VLAN 0 to HW filter on device team0 [ 1109.107320][ T6128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.114577][ T6128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1109.180461][T16226] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.187664][T16226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1109.248419][T16226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.462564][ T6343] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1109.480102][ T6343] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1109.895246][ T6768] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9017'. [ 1110.047637][ T6783] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9021'. [ 1110.151671][ T6785] syzkaller1: entered promiscuous mode [ 1110.166960][ T6785] syzkaller1: entered allmulticast mode [ 1110.211107][T16227] IPVS: stop unused estimator thread 0... [ 1110.412850][ T6795] mac80211_hwsim hwsim79 wlan0: entered promiscuous mode [ 1110.570244][ T6343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1110.682217][T30509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.725940][ T6343] veth0_vlan: entered promiscuous mode [ 1110.738457][ T6343] veth1_vlan: entered promiscuous mode [ 1110.766532][ T6343] veth0_macvtap: entered promiscuous mode [ 1110.831828][ T6343] veth1_macvtap: entered promiscuous mode [ 1110.929969][ T6818] bond12 (unregistering): Released all slaves [ 1111.001053][ T6343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1111.032168][ T6827] syz.4.9031: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1111.038642][ T6343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1111.064501][T30511] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.092968][T30511] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.130802][ T6827] CPU: 0 UID: 0 PID: 6827 Comm: syz.4.9031 Not tainted syzkaller #0 PREEMPT(full) [ 1111.130830][ T6827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1111.130842][ T6827] Call Trace: [ 1111.130850][ T6827] [ 1111.130859][ T6827] dump_stack_lvl+0xe8/0x150 [ 1111.130889][ T6827] warn_alloc+0x249/0x340 [ 1111.130920][ T6827] ? stack_trace_save+0xa9/0x100 [ 1111.130952][ T6827] ? __pfx_warn_alloc+0x10/0x10 [ 1111.130987][ T6827] ? kasan_save_track+0x4f/0x80 [ 1111.131013][ T6827] ? kasan_save_track+0x3e/0x80 [ 1111.131037][ T6827] ? __kasan_kmalloc+0x93/0xb0 [ 1111.131063][ T6827] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1111.131091][ T6827] ? xskq_create+0x56/0x170 [ 1111.131119][ T6827] ? xsk_setsockopt+0x54c/0x990 [ 1111.131144][ T6827] ? do_sock_setsockopt+0x17c/0x1b0 [ 1111.131173][ T6827] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1111.131202][ T6827] ? do_syscall_64+0x174/0x580 [ 1111.131228][ T6827] __vmalloc_node_range_noprof+0x132/0x1750 [ 1111.131301][ T6827] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1111.131338][ T6827] ? __kasan_kmalloc+0x93/0xb0 [ 1111.131375][ T6827] vmalloc_user_noprof+0xad/0xe0 [ 1111.131403][ T6827] ? xskq_create+0xbf/0x170 [ 1111.131432][ T6827] xskq_create+0xbf/0x170 [ 1111.131462][ T6827] xsk_init_queue+0x8a/0xe0 [ 1111.131492][ T6827] xsk_setsockopt+0x54c/0x990 [ 1111.131522][ T6827] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1111.131549][ T6827] ? __pfx_aa_sk_perm+0x10/0x10 [ 1111.131582][ T6827] ? aa_sock_opt_perm+0xff/0x1a0 [ 1111.131613][ T6827] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1111.131640][ T6827] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1111.131670][ T6827] do_sock_setsockopt+0x17c/0x1b0 [ 1111.131706][ T6827] __x64_sys_setsockopt+0x13d/0x1b0 [ 1111.131739][ T6827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.131762][ T6827] do_syscall_64+0x174/0x580 [ 1111.131782][ T6827] ? trace_irq_disable+0x3b/0x140 [ 1111.131812][ T6827] ? clear_bhb_loop+0x40/0x90 [ 1111.131839][ T6827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.131859][ T6827] RIP: 0033:0x7f4356b9ce59 [ 1111.131877][ T6827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1111.131895][ T6827] RSP: 002b:00007f4354df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1111.131917][ T6827] RAX: ffffffffffffffda RBX: 00007f4356e15fa0 RCX: 00007f4356b9ce59 [ 1111.131931][ T6827] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1111.131943][ T6827] RBP: 00007f4356c32d6f R08: 0000000000000004 R09: 0000000000000000 [ 1111.131956][ T6827] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1111.131969][ T6827] R13: 00007f4356e16038 R14: 00007f4356e15fa0 R15: 00007fff3f34a328 [ 1111.132003][ T6827] [ 1111.132012][ T6827] Mem-Info: [ 1111.179283][T30511] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.292878][ T6827] active_anon:6131 inactive_anon:4 isolated_anon:0 [ 1111.292878][ T6827] active_file:3204 inactive_file:40362 isolated_file:0 [ 1111.292878][ T6827] unevictable:768 dirty:71 writeback:0 [ 1111.292878][ T6827] slab_reclaimable:13729 slab_unreclaimable:140591 [ 1111.292878][ T6827] mapped:29283 shmem:1341 pagetables:1544 [ 1111.292878][ T6827] sec_pagetables:0 bounce:0 [ 1111.292878][ T6827] kernel_misc_reclaimable:0 [ 1111.292878][ T6827] free:1261601 free_pcp:22345 free_cma:0 [ 1111.506453][ T6827] Node 0 active_anon:24524kB inactive_anon:16kB active_file:12816kB inactive_file:161244kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:88460kB dirty:284kB writeback:0kB shmem:3828kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17992kB pagetables:5828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1111.628370][ T6827] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28672kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1111.640334][T30511] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.661285][ T6827] Node 0 DMA free:11264kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1111.661351][ T6827] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1111.661398][ T6827] Node 0 DMA32 free:1212772kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24524kB inactive_anon:16kB active_file:12816kB inactive_file:161244kB unevictable:1536kB writepending:284kB zspages:0kB present:3129332kB managed:2552776kB mlocked:0kB bounce:0kB free_pcp:31784kB local_pcp:14332kB free_cma:0kB [ 1111.661461][ T6827] lowmem_reserve[]: 0 0 0 0 0 [ 1111.661504][ T6827] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1111.661562][ T6827] lowmem_reserve[]: 0 0 0 0 0 [ 1111.661607][ T6827] Node 1 Normal free:3822368kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:58256kB local_pcp:29312kB free_cma:0kB [ 1111.661667][ T6827] lowmem_reserve[]: 0 0 0 0 0 [ 1111.661712][ T6827] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB [ 1111.661852][ T6827] Node 0 DMA32: 9183*4kB (UM) 8093*8kB (UME) 4524*16kB (UM) 402*32kB (UME) 125*64kB (UME) 588*128kB (UME) 799*256kB (UM) 402*512kB (UM) 282*1024kB (UME) 117*2048kB (UM) 1*4096kB (U) = 1212836kB [ 1111.662046][ T6827] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1111.662165][ T6827] Node 1 Normal: 4*4kB (U) 5*8kB (UM) 13*16kB (UM) 10*32kB (UM) 9*64kB (UM) 10*128kB [ 1112.057258][ T6837] netlink: 92 bytes leftover after parsing attributes in process `syz.3.9037'. [ 1112.115506][ T6827] (UM) 8*256kB (UM) 7*512kB (UM) 7*1024kB (UM) 5*2048kB (U) 927*4096kB (UM) = 3822472kB [ 1112.169505][ T6827] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1112.215484][T16228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.228254][ T6827] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1112.237626][ T6827] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1112.265621][ T6827] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1112.274974][ T6827] 44858 total pagecache pages [ 1112.279681][ T6827] 0 pages in swap cache [ 1112.283870][ T6827] Free swap = 124996kB [ 1112.288054][ T6827] Total swap = 124996kB [ 1112.292244][ T6827] 2097051 pages RAM [ 1112.296075][ T6827] 0 pages HighMem/MovableOnly [ 1112.300780][ T6827] 427072 pages reserved [ 1112.304965][ T6827] 0 pages cma reserved [ 1112.345087][T30511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.367071][T30511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.506165][ T6854] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1112.581817][T30509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.596401][T30509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.637448][ T6851] netlink: 100 bytes leftover after parsing attributes in process `syz.1.9039'. [ 1112.848083][ T6875] vlan3: entered promiscuous mode [ 1113.477920][T27292] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1113.494480][T27292] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1113.505461][T27292] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1113.517564][T27292] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1113.530653][T27292] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1113.556230][T16228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.688214][ T6911] erspan0: left allmulticast mode [ 1114.252580][ T6932] netlink: zone id is out of range [ 1114.265312][ T6939] sctp: [Deprecated]: syz.3.9064 (pid 6939) Use of int in maxseg socket option. [ 1114.265312][ T6939] Use struct sctp_assoc_value instead [ 1114.308730][ T6932] netlink: zone id is out of range [ 1114.340727][ T6932] netlink: zone id is out of range [ 1114.349089][ T6943] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.9063'. [ 1114.392625][ T6932] netlink: zone id is out of range [ 1114.448234][ T6932] netlink: zone id is out of range [ 1114.480724][ T6932] netlink: zone id is out of range [ 1114.516485][ T6932] netlink: zone id is out of range [ 1114.555536][ T6932] netlink: set zone limit has 4 unknown bytes [ 1114.633743][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.967560][ T6907] xfrm0 speed is unknown, defaulting to 1000 [ 1115.181768][ T6983] bridge0: port 3(gretap0) entered blocking state [ 1115.220933][ T6983] bridge0: port 3(gretap0) entered disabled state [ 1115.253902][ T6983] gretap0: entered promiscuous mode [ 1115.440193][ T6993] bond14: option lp_interval: invalid value (0) [ 1115.459559][ T6993] bond14: option lp_interval: allowed values 1 - 2147483647 [ 1115.542693][ T6993] bond14 (unregistering): Released all slaves [ 1115.620157][ T6974] nbd6: detected capacity change from 0 to 127 [ 1115.657602][ T6907] xfrm0 speed is unknown, defaulting to 1000 [ 1115.678512][T27292] Bluetooth: hci5: command tx timeout [ 1115.721150][ T5637] block nbd6: Receive control failed (result -104) [ 1115.789439][ T7009] netlink: 'syz.4.9078': attribute type 11 has an invalid length. [ 1115.880123][ T7009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9078'. [ 1116.119452][ T146] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.171922][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9081'. [ 1116.766102][ T6907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.773379][ T6907] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.780707][ T6907] bridge_slave_0: entered allmulticast mode [ 1116.788686][ T6907] bridge_slave_0: entered promiscuous mode [ 1116.852369][ T146] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.871954][ T6907] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.881094][ T6907] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.889707][ T6907] bridge_slave_1: entered allmulticast mode [ 1116.897922][ T6907] bridge_slave_1: entered promiscuous mode [ 1116.960440][ T6907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1116.982385][ T6907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1117.007174][ T7069] netlink: 'syz.3.9092': attribute type 3 has an invalid length. [ 1117.080082][ T6907] team0: Port device team_slave_0 added [ 1117.105640][ T6907] team0: Port device team_slave_1 added [ 1117.185068][ T6907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1117.192770][ T6907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1117.222645][ T6907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1117.295313][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9095'. [ 1117.327860][ T146] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.345295][ T6907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1117.352330][ T6907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1117.396851][ T6907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1117.459863][ T6907] hsr_slave_0: entered promiscuous mode [ 1117.466779][ T6907] hsr_slave_1: entered promiscuous mode [ 1117.473307][ T6907] debugfs: 'hsr0' already exists in 'hsr' [ 1117.479126][ T6907] Cannot create hsr debugfs directory [ 1117.589137][ T146] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.710015][ T7094] mac80211_hwsim hwsim72 wlan0: entered allmulticast mode [ 1117.755429][ T5637] Bluetooth: hci5: command tx timeout [ 1117.863958][ T7096] xt_socket: unknown flags 0x50 [ 1118.290124][ T7110] syzkaller0: entered promiscuous mode [ 1118.295660][ T7110] syzkaller0: entered allmulticast mode [ 1118.546524][ T7125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9107'. [ 1118.986316][T16228] net_ratelimit: 6 callbacks suppressed [ 1118.986337][T16228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.835017][ T5637] Bluetooth: hci5: command tx timeout [ 1120.196118][T16226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.302476][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.310938][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.855693][ T146] bond0 (unregistering): Released all slaves [ 1120.867994][ T146] bond1 (unregistering): Released all slaves [ 1120.892001][ T146] bond2 (unregistering): Released all slaves [ 1120.910672][ T146] bond3 (unregistering): Released all slaves [ 1120.927288][ T146] bond4 (unregistering): Released all slaves [ 1120.966867][ T146] bond5 (unregistering): Released all slaves [ 1120.983393][ T146] bond6 (unregistering): Released all slaves [ 1121.002402][ T146] bond7 (unregistering): (slave team_slave_0): Removing an active aggregator [ 1121.013148][ T146] bond7 (unregistering): (slave team_slave_0): Releasing backup interface [ 1121.024167][ T146] bond7 (unregistering): Released all slaves [ 1121.046691][ T7125] macvlan3: entered allmulticast mode [ 1121.064572][ T7125] dummy0: entered allmulticast mode [ 1121.085279][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1121.261257][ T7157] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1121.343483][ T146] : left promiscuous mode [ 1121.409197][ T7161] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x200000000100 ref_ctr_offset(new): 0x6e [ 1121.637451][T16227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.703351][ T7177] netlink: 'syz.4.9118': attribute type 1 has an invalid length. [ 1121.742964][ T146] tipc: Left network mode [ 1121.886597][ T7178] tipc: MTU too low for tipc bearer [ 1121.955832][ T5637] Bluetooth: hci5: command tx timeout [ 1122.186404][ T7193] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9119'. [ 1122.549724][ T7205] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9122'. [ 1122.584505][ T7203] netlink: 88 bytes leftover after parsing attributes in process `syz.4.9121'. [ 1122.593630][ T7203] netlink: 88 bytes leftover after parsing attributes in process `syz.4.9121'. [ 1122.980529][ T7220] netlink: 'syz.1.9125': attribute type 1 has an invalid length. [ 1122.988331][ T7220] netlink: 228 bytes leftover after parsing attributes in process `syz.1.9125'. [ 1123.106953][ T7220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9125'. [ 1123.187488][T30509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.432906][ T7231] macsec0: entered promiscuous mode [ 1123.456268][ T6907] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1123.469579][ T6907] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1123.518287][ T6907] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1123.552307][ T6907] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1123.591493][ T6907] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1123.640479][ T6907] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1123.671662][ T6907] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1123.708739][ T6907] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1123.785544][ T7229] macsec0: left promiscuous mode [ 1123.796367][ T7240] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9128'. [ 1124.044550][ T7250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9129'. [ 1124.378585][ T6907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.585069][ T6907] 8021q: adding VLAN 0 to HW filter on device team0 [ 1124.616199][T16227] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.623472][T16227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1124.653730][ T6128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.681374][T16227] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.688668][T16227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1125.248311][ T7285] openvswitch: netlink: Duplicate key (type 2). [ 1125.281626][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.290156][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.311944][ T7285] x_tables: duplicate underflow at hook 1 [ 1125.484330][ T7291] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9135'. [ 1125.732480][ T7304] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1125.739761][ T7304] IPv6: NLM_F_CREATE should be set when creating new route [ 1125.758363][ T7304] IPv6: NLM_F_CREATE should be set when creating new route [ 1125.765643][ T7304] IPv6: NLM_F_CREATE should be set when creating new route [ 1125.987639][ T146] veth1_macvtap: left promiscuous mode [ 1126.007206][ T146] veth0_macvtap: left promiscuous mode [ 1126.019089][ T146] veth1_vlan: left promiscuous mode [ 1126.050082][ T146] veth0_vlan: left promiscuous mode [ 1126.316925][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.437285][ T146] pim6reg (unregistering): left allmulticast mode [ 1127.204948][ T7312] tunl0: entered promiscuous mode [ 1127.210297][ T7312] netlink: 'syz.3.9139': attribute type 4 has an invalid length. [ 1127.249644][ T7312] netlink: 9 bytes leftover after parsing attributes in process `syz.3.9139'. [ 1127.260042][ T7311] netlink: 'syz.3.9139': attribute type 4 has an invalid length. [ 1127.268726][ T7311] netlink: 9 bytes leftover after parsing attributes in process `syz.3.9139'. [ 1127.696516][ T6125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.709213][ T7339] sit2: entered promiscuous mode [ 1127.714223][ T7339] sit2: entered allmulticast mode [ 1127.742725][ T6907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1127.878393][ T6907] veth0_vlan: entered promiscuous mode [ 1127.959871][ T6907] veth1_vlan: entered promiscuous mode [ 1128.096494][ T6907] veth0_macvtap: entered promiscuous mode [ 1128.176841][ T6907] veth1_macvtap: entered promiscuous mode [ 1128.268355][ T6907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1128.378235][ T7363] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9145'. [ 1128.390452][ T6907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1128.501964][T30509] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.510747][T30509] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.519492][T30509] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.528317][T30509] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.542186][ T7367] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available [ 1128.586226][ T10] IPVS: starting estimator thread 0... [ 1128.673705][ T7368] IPVS: using max 28 ests per chain, 67200 per kthread [ 1128.810169][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1128.818268][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1128.840049][ T7376] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9148'. [ 1129.084593][T16227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1129.092521][T16227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1129.145543][ T146] IPVS: stop unused estimator thread 0... [ 1129.409032][ T7397] netlink: 'syz.1.9151': attribute type 1 has an invalid length. [ 1129.593682][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.181254][T27292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1130.194132][T27292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1130.202369][T27292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1130.210484][T27292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1130.247057][T27292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1130.792379][ T146] veth1_to_bridge: left allmulticast mode [ 1130.841869][ T146] veth1_to_bridge: left promiscuous mode [ 1130.877744][ T146] bridge0: port 3(veth1_to_bridge) entered disabled state [ 1130.995703][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.033628][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.042184][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.077923][ T146] bridge_slave_1: left allmulticast mode [ 1131.089790][ T146] bridge_slave_1: left promiscuous mode [ 1131.106229][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.196009][ T146] bridge_slave_0: left allmulticast mode [ 1131.201973][ T146] bridge_slave_0: left promiscuous mode [ 1131.228142][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.629554][ T146] pimreg6: left allmulticast mode [ 1132.399824][ T5637] Bluetooth: hci0: command tx timeout [ 1133.132833][ T146] bond8 (unregistering): (slave ipip0): Releasing backup interface [ 1133.167512][ T146] ipip0 (unregistering): left promiscuous mode [ 1133.581458][ T146] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1134.474506][ T5637] Bluetooth: hci0: command tx timeout [ 1135.852718][ T146] bond9 (unregistering): (slave bridge6): Releasing backup interface [ 1136.553634][ T5637] Bluetooth: hci0: command tx timeout [ 1136.954141][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1136.969642][ T146] bond_slave_0: left allmulticast mode [ 1136.977397][ T146] bond0 (unregistering): Released all slaves [ 1136.990476][ T146] bond1 (unregistering): Released all slaves [ 1137.007801][ T146] bond2 (unregistering): Released all slaves [ 1137.024521][ T146] bond3 (unregistering): Released all slaves [ 1137.047922][ T146] bond4 (unregistering): Released all slaves [ 1137.068537][ T146] bond5 (unregistering): Released all slaves [ 1137.093424][ T146] bond6 (unregistering): Released all slaves [ 1137.109044][ T146] bond7 (unregistering): Released all slaves [ 1137.126595][ T146] bond8 (unregistering): Released all slaves [ 1137.144074][ T146] bond9 (unregistering): Released all slaves [ 1137.165274][ T146] bond10 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1137.176596][ T146] bond10 (unregistering): Released all slaves [ 1137.221390][ T146] bond11 (unregistering): Released all slaves [ 1137.237354][ T146] bond12 (unregistering): Released all slaves [ 1137.253588][ T146] bond13 (unregistering): Released all slaves [ 1137.445514][ T7499] mac80211_hwsim hwsim73 syzkaller0: left promiscuous mode [ 1137.452835][ T7499] mac80211_hwsim hwsim73 syzkaller0: left allmulticast mode [ 1137.612117][ T7511] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9172'. [ 1137.737698][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9174'. [ 1137.928125][ T7517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9172'. [ 1137.936110][ T7420] xfrm0 speed is unknown, defaulting to 1000 [ 1138.219104][ T146] : left promiscuous mode [ 1138.507163][ T7420] xfrm0 speed is unknown, defaulting to 1000 [ 1138.726281][ T5637] Bluetooth: hci0: command tx timeout [ 1138.845222][ T146] : left promiscuous mode [ 1139.006897][ T7540] netlink: 'syz.3.9180': attribute type 1 has an invalid length. [ 1139.358092][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9182'. [ 1139.396396][ T7550] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7 [ 1139.901499][ T7420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.910238][ T7420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.920257][ T7420] bridge_slave_0: entered allmulticast mode [ 1139.929383][ T7420] bridge_slave_0: entered promiscuous mode [ 1139.959038][ T7420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.968170][ T7420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.976865][ T7420] bridge_slave_1: entered allmulticast mode [ 1139.987834][ T7420] bridge_slave_1: entered promiscuous mode [ 1140.058072][ T7420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1140.072184][ T7420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1140.247374][ T7420] team0: Port device team_slave_0 added [ 1140.258372][ T7420] team0: Port device team_slave_1 added [ 1140.311581][ T7420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.321093][ T7420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.359910][ T7420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.379940][ T7420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1140.387945][ T7420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.418592][ T7420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1140.637994][ T7420] hsr_slave_0: entered promiscuous mode [ 1140.644720][ T7420] hsr_slave_1: entered promiscuous mode [ 1140.651041][ T7420] debugfs: 'hsr0' already exists in 'hsr' [ 1140.656829][ T7420] Cannot create hsr debugfs directory [ 1140.864170][ T7591] netlink: 'syz.0.9193': attribute type 1 has an invalid length. [ 1140.872032][ T7591] netlink: 'syz.0.9193': attribute type 1 has an invalid length. [ 1140.992549][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9194'. [ 1141.231728][ T7603] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1141.598283][ T146] hsr_slave_0: left promiscuous mode [ 1141.615860][ T146] hsr_slave_1: left promiscuous mode [ 1141.622083][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1141.629508][ T146] batadv0: mtu less than device minimum [ 1141.636700][ T146] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1141.649485][ T146] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1141.661431][ T146] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1141.673351][ T146] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1141.699645][ T146] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1141.711512][ T146] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1141.723438][ T146] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1141.735362][ T146] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1141.747288][ T146] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1141.942758][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1141.961092][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1141.997747][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1142.066530][ T146] batman_adv: batadv0: Interface deactivated: dummy0 [ 1142.073324][ T146] batman_adv: batadv0: Removing interface: dummy0 [ 1142.178621][ T7616] netlink: 'syz.3.9197': attribute type 83 has an invalid length. [ 1142.841771][ T146] team_slave_1 (unregistering): left allmulticast mode [ 1142.860074][ T146] team0 (unregistering): Port device team_slave_1 removed [ 1142.878573][ T146] team_slave_0 (unregistering): left allmulticast mode [ 1142.887246][ T146] team0 (unregistering): Port device team_slave_0 removed [ 1143.515881][ T5637] Bluetooth: hci0: command tx timeout [ 1143.880653][ T7694] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9210'. [ 1145.001702][ T7420] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1145.072474][ T7420] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1145.110037][ T7420] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1145.150383][ T7420] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1145.200254][ T7420] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1145.242607][ T7420] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1145.274003][ T7420] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1145.297134][ T7420] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1145.355362][ T146] IPVS: stop unused estimator thread 0... [ 1145.854750][ T7773] mac80211_hwsim hwsim99 syzkaller0: entered promiscuous mode [ 1145.870305][ T1683] block nbd6: Possible stuck request ffff888027280000: control (read@0,1024B). Runtime 30 seconds [ 1145.889970][ T1683] block nbd6: Possible stuck request ffff8880272801c0: control (read@1024,1024B). Runtime 30 seconds [ 1145.904383][ T1683] block nbd6: Possible stuck request ffff888027280380: control (read@2048,1024B). Runtime 30 seconds [ 1145.918394][ T1683] block nbd6: Possible stuck request ffff888027280540: control (read@3072,1024B). Runtime 30 seconds [ 1145.952446][ T7773] mac80211_hwsim hwsim99 syzkaller0: entered allmulticast mode [ 1146.000208][ T7420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1146.022944][ T7420] 8021q: adding VLAN 0 to HW filter on device team0 [ 1146.063179][T30509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.070459][T30509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1146.088635][T30509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.095836][T30509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1146.139502][ T7782] ip6erspan0: entered promiscuous mode [ 1146.145054][ T7782] ip6erspan0: entered allmulticast mode [ 1146.585147][ T7807] bond1: entered promiscuous mode [ 1146.605326][ T7807] bond1: entered allmulticast mode [ 1146.654229][ T7807] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1146.958084][ T7830] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.9235'. [ 1146.971278][ T7830] net_ratelimit: 30 callbacks suppressed [ 1146.971299][ T7830] openvswitch: netlink: Message has 5 unknown bytes. [ 1147.027670][ T7819] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1147.222837][ T6125] bridge_slave_1: left allmulticast mode [ 1147.229032][ T6125] bridge_slave_1: left promiscuous mode [ 1147.239737][ T6125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.330365][ T6125] bridge_slave_0: left allmulticast mode [ 1147.347152][ T6125] bridge_slave_0: left promiscuous mode [ 1147.355404][ T6125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.436333][ T6125] pimreg3: left allmulticast mode [ 1147.525121][ T7860] netlink: 'syz.2.9242': attribute type 4 has an invalid length. [ 1147.630922][ T7865] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9244'. [ 1147.921901][ T6125] batman_adv: batadv0: Removing interface: gretap1 [ 1149.801412][ T6125] bond1 (unregistering): Released all slaves [ 1149.819586][ T6125] bond0 (unregistering): (slave bond_slave_1): Releasing active interface [ 1149.831146][ T6125] bond0 (unregistering): Released all slaves [ 1149.854607][ T6125] bond2 (unregistering): (slave lo): Releasing backup interface [ 1149.862974][ T6125] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1149.875096][ T6125] bond2 (unregistering): Released all slaves [ 1149.891594][ T6125] bond3 (unregistering): Released all slaves [ 1149.917132][ T6125] bond4 (unregistering): Released all slaves [ 1149.936123][ T6125] bond5 (unregistering): Released all slaves [ 1149.971538][ T6125] bond6 (unregistering): Released all slaves [ 1149.988861][ T6125] bond7 (unregistering): Released all slaves [ 1150.006312][ T6125] bond8 (unregistering): Released all slaves [ 1150.049060][ T6125] bond9 (unregistering): Released all slaves [ 1150.069058][ T6125] bond10 (unregistering): Released all slaves [ 1150.086564][ T6125] bond11 (unregistering): Released all slaves [ 1150.315466][ T7894] netlink: 'syz.0.9246': attribute type 1 has an invalid length. [ 1150.430857][ T7894] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1150.531396][ T6125] : left promiscuous mode [ 1150.593539][ T7900] bond1: (slave geneve2): making interface the new active one [ 1150.641209][ T7900] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1150.678154][ T7420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1150.761621][ T7420] veth0_vlan: entered promiscuous mode [ 1151.000138][ T7420] veth1_vlan: entered promiscuous mode [ 1151.149946][ T7420] veth0_macvtap: entered promiscuous mode [ 1151.202004][ T7420] veth1_macvtap: entered promiscuous mode [ 1151.328682][ T6125] tipc: Left network mode [ 1151.348335][ T7937] cgroup_mt_check_v1: 55 callbacks suppressed [ 1151.348353][ T7937] xt_cgroup: invalid path, errno=-2 [ 1151.360603][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9252'. [ 1151.409420][ T7940] netlink: 'syz.0.9255': attribute type 4 has an invalid length. [ 1151.502049][ T7940] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9255'. [ 1151.513187][ T7420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1151.621684][ T7940] .`: renamed from bond0 (while UP) [ 1151.701494][ T7420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1151.760436][ T146] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.906366][ T146] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.960188][ T146] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.056827][ T7962] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20001 [ 1152.294264][ T7954] bond9: entered promiscuous mode [ 1152.310298][ T7954] bond9: entered allmulticast mode [ 1152.317998][ T7954] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1152.346933][ T146] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.511775][ T7981] netlink: 'syz.0.9263': attribute type 11 has an invalid length. [ 1152.519667][ T7981] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9263'. [ 1152.624617][ T7990] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9265'. [ 1152.746388][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.797664][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1153.022646][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1153.070004][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1153.234748][ T8009] netlink: 'syz.3.9269': attribute type 2 has an invalid length. [ 1153.297947][ T8009] netlink: 188 bytes leftover after parsing attributes in process `syz.3.9269'. [ 1153.326098][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9269'. [ 1153.427958][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9272'. [ 1154.250061][T27292] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1154.315605][T27292] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1154.326680][T27292] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1154.337452][T27292] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1154.349911][T27292] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1154.915793][ T6125] hsr_slave_0: left promiscuous mode [ 1154.922031][ T6125] hsr_slave_1: left promiscuous mode [ 1154.968472][ T8070] netlink: 'syz.2.9284': attribute type 1 has an invalid length. [ 1154.977384][ T6125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1154.988040][ T6125] dummy0: left allmulticast mode [ 1155.098546][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9284'. [ 1155.254794][ T6125] team0 (unregistering): Port device team_slave_1 removed [ 1155.281098][ T6125] team0 (unregistering): Port device team_slave_0 removed [ 1155.502953][ T8070] bond2: entered promiscuous mode [ 1155.533619][ T8070] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1155.974569][ T8034] xfrm0 speed is unknown, defaulting to 1000 [ 1156.046821][ T8100] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1156.220635][ T8108] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9294'. [ 1156.473827][T27292] Bluetooth: hci2: command tx timeout [ 1156.547788][ T8034] xfrm0 speed is unknown, defaulting to 1000 [ 1157.170174][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9298'. [ 1157.179338][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9298'. [ 1157.219433][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9298'. [ 1157.460688][ T8143] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1157.600247][ T8143] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9301'. [ 1157.611419][ T8034] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.624888][ T8034] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.634580][ T8034] bridge_slave_0: entered allmulticast mode [ 1157.642502][ T8034] bridge_slave_0: entered promiscuous mode [ 1157.652406][ T8034] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.661162][ T8034] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.669461][ T8034] bridge_slave_1: entered allmulticast mode [ 1157.681195][ T8034] bridge_slave_1: entered promiscuous mode [ 1157.689258][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9304'. [ 1157.698195][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9304'. [ 1157.716114][ T8143] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.736224][ T8143] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.899929][ T8157] netlink: 232 bytes leftover after parsing attributes in process `syz.3.9304'. [ 1157.927690][ T8034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1157.958846][ T8034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1158.057179][ T8034] team0: Port device team_slave_0 added [ 1158.136082][ T8167] netlink: 'syz.3.9306': attribute type 1 has an invalid length. [ 1158.287684][ T8167] bond15: entered promiscuous mode [ 1158.309966][ T8167] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1158.350408][ T8034] team0: Port device team_slave_1 added [ 1158.388239][ T8034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1158.395253][ T8034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1158.489720][ T8034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1158.505312][ T8034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1158.512323][ T8034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1158.561364][ T8180] xt_hashlimit: size too large, truncated to 1048576 [ 1158.613077][ T8034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1158.668957][T27292] Bluetooth: hci2: command tx timeout [ 1158.750080][ T6125] IPVS: stop unused estimator thread 0... [ 1158.758441][ T8034] hsr_slave_0: entered promiscuous mode [ 1158.809921][ T8192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1158.841818][ T8034] hsr_slave_1: entered promiscuous mode [ 1158.848321][ T8034] debugfs: 'hsr0' already exists in 'hsr' [ 1158.854094][ T8034] Cannot create hsr debugfs directory [ 1158.898833][ T8195] vlan2: entered promiscuous mode [ 1159.191793][ T8196] syzkaller0: entered promiscuous mode [ 1159.216615][ T8196] syzkaller0: entered allmulticast mode [ 1159.359485][ T8211] xt_policy: output policy not valid in PREROUTING and INPUT [ 1159.386947][ T8211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9314'. [ 1159.462820][T27292] block nbd7: Receive control failed (result -107) [ 1159.472497][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9313'. [ 1159.489765][ T8214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9313'. [ 1159.653179][ T8220] netlink: 'syz.2.9316': attribute type 10 has an invalid length. [ 1159.708707][ T8220] team0: entered allmulticast mode [ 1159.713911][ T8220] team_slave_0: entered allmulticast mode [ 1159.719681][ T8220] team_slave_1: entered allmulticast mode [ 1159.725773][ T8220] bridge0: port 3(team0) entered blocking state [ 1159.732189][ T8220] bridge0: port 3(team0) entered disabled state [ 1159.765774][ T8220] team0: entered promiscuous mode [ 1159.770914][ T8220] team_slave_0: entered promiscuous mode [ 1159.815547][ T8220] team_slave_1: entered promiscuous mode [ 1159.841378][ T8220] bridge0: port 3(team0) entered blocking state [ 1159.847817][ T8220] bridge0: port 3(team0) entered forwarding state [ 1159.994738][ T8225] batman_adv: batadv0: Adding interface: dummy0 [ 1160.019779][ T8225] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1160.045058][ T8225] batman_adv: batadv0: Interface activated: dummy0 [ 1160.100715][ T8229] batadv0: mtu less than device minimum [ 1160.137288][ T8229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1160.149134][ T8229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1160.160939][ T8229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1160.172801][ T8229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1160.184586][ T8229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1160.196366][ T8229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1160.208131][ T8229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1160.230449][ T8229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1160.338764][ T8233] pim6reg: entered allmulticast mode [ 1160.356607][ T8232] [ 1160.359015][ T8232] ====================================================== [ 1160.366068][ T8232] WARNING: possible circular locking dependency detected [ 1160.373131][ T8232] syzkaller #0 Not tainted [ 1160.377576][ T8232] ------------------------------------------------------ [ 1160.384617][ T8232] syz.2.9320/8232 is trying to acquire lock: [ 1160.390612][ T8232] ffffffff8ea85640 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1160.400495][ T8232] [ 1160.400495][ T8232] but task is already holding lock: [ 1160.407886][ T8232] ffff888061ce8260 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 1160.416641][ T8232] [ 1160.416641][ T8232] which lock already depends on the new lock. [ 1160.416641][ T8232] [ 1160.427064][ T8232] [ 1160.427064][ T8232] the existing dependency chain (in reverse order) is: [ 1160.436107][ T8232] [ 1160.436107][ T8232] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1160.443884][ T8232] lock_sock_nested+0x41/0x100 [ 1160.449218][ T8232] inet_shutdown+0x6a/0x390 [ 1160.454277][ T8232] nbd_mark_nsock_dead+0x2e9/0x560 [ 1160.460018][ T8232] recv_work+0x1c2e/0x1d40 [ 1160.464992][ T8232] process_scheduled_works+0xb5d/0x1860 [ 1160.471112][ T8232] worker_thread+0xa53/0xfc0 [ 1160.476274][ T8232] kthread+0x389/0x470 [ 1160.480911][ T8232] ret_from_fork+0x514/0xb70 [ 1160.486067][ T8232] ret_from_fork_asm+0x1a/0x30 [ 1160.491382][ T8232] [ 1160.491382][ T8232] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1160.499050][ T8232] __mutex_lock+0x1a3/0x1550 [ 1160.504198][ T8232] nbd_queue_rq+0x37b/0x1100 [ 1160.509418][ T8232] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1160.515566][ T8232] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1160.522470][ T8232] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1160.528985][ T8232] blk_mq_run_hw_queue+0x348/0x4f0 [ 1160.534634][ T8232] blk_mq_dispatch_list+0xd16/0xe10 [ 1160.540369][ T8232] blk_mq_flush_plug_list+0x48d/0x570 [ 1160.546286][ T8232] __blk_flush_plug+0x3ed/0x4d0 [ 1160.551737][ T8232] __submit_bio+0x28d/0x580 [ 1160.556782][ T8232] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1160.562954][ T8232] block_read_full_folio+0x599/0x830 [ 1160.568866][ T8232] filemap_read_folio+0x137/0x3b0 [ 1160.574451][ T8232] do_read_cache_folio+0x358/0x590 [ 1160.580115][ T8232] read_part_sector+0xb6/0x2b0 [ 1160.585428][ T8232] adfspart_check_ICS+0xb1/0x960 [ 1160.590917][ T8232] bdev_disk_changed+0x817/0x1770 [ 1160.596501][ T8232] blkdev_get_whole+0x380/0x510 [ 1160.601980][ T8232] bdev_open+0x31e/0xd30 [ 1160.606761][ T8232] blkdev_open+0x470/0x610 [ 1160.611716][ T8232] do_dentry_open+0x822/0x13a0 [ 1160.617018][ T8232] vfs_open+0x3b/0x340 [ 1160.621640][ T8232] path_openat+0x2e08/0x3860 [ 1160.626769][ T8232] do_file_open+0x23e/0x4a0 [ 1160.631810][ T8232] do_sys_openat2+0x113/0x200 [ 1160.637034][ T8232] __x64_sys_openat+0x138/0x170 [ 1160.642430][ T8232] do_syscall_64+0x174/0x580 [ 1160.647557][ T8232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.653989][ T8232] [ 1160.653989][ T8232] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1160.661216][ T8232] __mutex_lock+0x1a3/0x1550 [ 1160.666345][ T8232] nbd_queue_rq+0xc6/0x1100 [ 1160.671396][ T8232] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1160.677483][ T8232] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1160.684356][ T8232] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1160.690892][ T8232] blk_mq_run_hw_queue+0x348/0x4f0 [ 1160.696554][ T8232] blk_mq_dispatch_list+0xd16/0xe10 [ 1160.702308][ T8232] blk_mq_flush_plug_list+0x48d/0x570 [ 1160.708233][ T8232] __blk_flush_plug+0x3ed/0x4d0 [ 1160.713627][ T8232] __submit_bio+0x28d/0x580 [ 1160.718669][ T8232] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1160.724842][ T8232] block_read_full_folio+0x599/0x830 [ 1160.730662][ T8232] filemap_read_folio+0x137/0x3b0 [ 1160.736225][ T8232] do_read_cache_folio+0x358/0x590 [ 1160.741882][ T8232] read_part_sector+0xb6/0x2b0 [ 1160.747188][ T8232] adfspart_check_ICS+0xb1/0x960 [ 1160.752661][ T8232] bdev_disk_changed+0x817/0x1770 [ 1160.758220][ T8232] blkdev_get_whole+0x380/0x510 [ 1160.763620][ T8232] bdev_open+0x31e/0xd30 [ 1160.768402][ T8232] blkdev_open+0x470/0x610 [ 1160.773356][ T8232] do_dentry_open+0x822/0x13a0 [ 1160.778673][ T8232] vfs_open+0x3b/0x340 [ 1160.783305][ T8232] path_openat+0x2e08/0x3860 [ 1160.788463][ T8232] do_file_open+0x23e/0x4a0 [ 1160.793510][ T8232] do_sys_openat2+0x113/0x200 [ 1160.798732][ T8232] __x64_sys_openat+0x138/0x170 [ 1160.804125][ T8232] do_syscall_64+0x174/0x580 [ 1160.809272][ T8232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.815716][ T8232] [ 1160.815716][ T8232] -> #3 (set->srcu){.+.+}-{0:0}: [ 1160.822895][ T8232] __synchronize_srcu+0xca/0x300 [ 1160.828398][ T8232] elevator_switch+0x1e8/0x7a0 [ 1160.833711][ T8232] elevator_change+0x2cc/0x450 [ 1160.839014][ T8232] elevator_set_default+0x36c/0x430 [ 1160.844760][ T8232] blk_register_queue+0x3e9/0x4e0 [ 1160.850329][ T8232] __add_disk+0x677/0xd50 [ 1160.855216][ T8232] add_disk_fwnode+0xfb/0x480 [ 1160.860443][ T8232] nbd_dev_add+0x72c/0xb50 [ 1160.865402][ T8232] nbd_init+0x168/0x1f0 [ 1160.870098][ T8232] do_one_initcall+0x250/0x870 [ 1160.875398][ T8232] do_initcall_level+0x104/0x190 [ 1160.880879][ T8232] do_initcalls+0x59/0xa0 [ 1160.885752][ T8232] kernel_init_freeable+0x2a6/0x3e0 [ 1160.891496][ T8232] kernel_init+0x1d/0x1d0 [ 1160.896371][ T8232] ret_from_fork+0x514/0xb70 [ 1160.901495][ T8232] ret_from_fork_asm+0x1a/0x30 [ 1160.906799][ T8232] [ 1160.906799][ T8232] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1160.914650][ T8232] __mutex_lock+0x1a3/0x1550 [ 1160.919781][ T8232] elevator_change+0x1b3/0x450 [ 1160.925093][ T8232] elevator_set_none+0xb5/0x140 [ 1160.930495][ T8232] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1160.936864][ T8232] nbd_start_device+0x17f/0xb10 [ 1160.942277][ T8232] nbd_genl_connect+0x165b/0x1cf0 [ 1160.947851][ T8232] genl_family_rcv_msg_doit+0x22a/0x330 [ 1160.953934][ T8232] genl_rcv_msg+0x61c/0x7a0 [ 1160.958971][ T8232] netlink_rcv_skb+0x232/0x4b0 [ 1160.964274][ T8232] genl_rcv+0x28/0x40 [ 1160.968796][ T8232] netlink_unicast+0x75c/0x8e0 [ 1160.974113][ T8232] netlink_sendmsg+0x813/0xb40 [ 1160.979442][ T8232] ____sys_sendmsg+0x972/0x9f0 [ 1160.984759][ T8232] ___sys_sendmsg+0x2a5/0x360 [ 1160.989977][ T8232] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1160.995455][ T8232] do_syscall_64+0x174/0x580 [ 1161.000589][ T8232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.007017][ T8232] [ 1161.007017][ T8232] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 1161.015648][ T8232] blk_alloc_queue+0x546/0x680 [ 1161.021045][ T8232] __blk_mq_alloc_disk+0x197/0x390 [ 1161.026703][ T8232] nbd_dev_add+0x499/0xb50 [ 1161.031665][ T8232] nbd_init+0x168/0x1f0 [ 1161.036369][ T8232] do_one_initcall+0x250/0x870 [ 1161.041693][ T8232] do_initcall_level+0x104/0x190 [ 1161.047182][ T8232] do_initcalls+0x59/0xa0 [ 1161.052064][ T8232] kernel_init_freeable+0x2a6/0x3e0 [ 1161.057819][ T8232] kernel_init+0x1d/0x1d0 [ 1161.062696][ T8232] ret_from_fork+0x514/0xb70 [ 1161.067823][ T8232] ret_from_fork_asm+0x1a/0x30 [ 1161.073126][ T8232] [ 1161.073126][ T8232] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1161.080358][ T8232] __lock_acquire+0x15a5/0x2cf0 [ 1161.085752][ T8232] lock_acquire+0x106/0x350 [ 1161.090791][ T8232] fs_reclaim_acquire+0x71/0x100 [ 1161.096274][ T8232] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1161.102626][ T8232] __alloc_skb+0x1d0/0x7d0 [ 1161.107585][ T8232] tcp_send_active_reset+0x8a/0x5a0 [ 1161.113324][ T8232] __tcp_close+0x4c5/0xfe0 [ 1161.118290][ T8232] tcp_close+0x28/0x110 [ 1161.122991][ T8232] inet_release+0x143/0x190 [ 1161.128030][ T8232] sock_close+0xc3/0x240 [ 1161.132815][ T8232] __fput+0x44f/0xa60 [ 1161.137338][ T8232] task_work_run+0x1d9/0x270 [ 1161.142467][ T8232] exit_to_user_mode_loop+0x193/0x680 [ 1161.148380][ T8232] do_syscall_64+0x353/0x580 [ 1161.153528][ T8232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.159966][ T8232] [ 1161.159966][ T8232] other info that might help us debug this: [ 1161.159966][ T8232] [ 1161.170215][ T8232] Chain exists of: [ 1161.170215][ T8232] fs_reclaim --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 1161.170215][ T8232] [ 1161.182940][ T8232] Possible unsafe locking scenario: [ 1161.182940][ T8232] [ 1161.190401][ T8232] CPU0 CPU1 [ 1161.195775][ T8232] ---- ---- [ 1161.201152][ T8232] lock(sk_lock-AF_INET6); [ 1161.205675][ T8232] lock(&nsock->tx_lock); [ 1161.212627][ T8232] lock(sk_lock-AF_INET6); [ 1161.219670][ T8232] lock(fs_reclaim); [ 1161.223667][ T8232] [ 1161.223667][ T8232] *** DEADLOCK *** [ 1161.223667][ T8232] [ 1161.231817][ T8232] 2 locks held by syz.2.9320/8232: [ 1161.236933][ T8232] #0: ffff88803faaef80 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1161.247140][ T8232] #1: ffff888061ce8260 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 1161.256300][ T8232] [ 1161.256300][ T8232] stack backtrace: [ 1161.262203][ T8232] CPU: 1 UID: 0 PID: 8232 Comm: syz.2.9320 Not tainted syzkaller #0 PREEMPT(full) [ 1161.262222][ T8232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1161.262233][ T8232] Call Trace: [ 1161.262241][ T8232] [ 1161.262249][ T8232] dump_stack_lvl+0xe8/0x150 [ 1161.262269][ T8232] print_circular_bug+0x2e1/0x300 [ 1161.262293][ T8232] check_noncircular+0x12e/0x150 [ 1161.262317][ T8232] __lock_acquire+0x15a5/0x2cf0 [ 1161.262337][ T8232] ? __lock_acquire+0x6b5/0x2cf0 [ 1161.262358][ T8232] ? do_raw_spin_lock+0x12b/0x2f0 [ 1161.262385][ T8232] ? inet_unhash+0x1fe/0xab0 [ 1161.262410][ T8232] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1161.262432][ T8232] lock_acquire+0x106/0x350 [ 1161.262448][ T8232] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1161.262471][ T8232] ? lock_acquire+0x106/0x350 [ 1161.262490][ T8232] fs_reclaim_acquire+0x71/0x100 [ 1161.262515][ T8232] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1161.262537][ T8232] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1161.262560][ T8232] ? __alloc_skb+0x1d0/0x7d0 [ 1161.262582][ T8232] ? __local_bh_enable_ip+0xd0/0x130 [ 1161.262600][ T8232] __alloc_skb+0x1d0/0x7d0 [ 1161.262623][ T8232] ? __pfx_skb_attempt_defer_free+0x10/0x10 [ 1161.262641][ T8232] tcp_send_active_reset+0x8a/0x5a0 [ 1161.262662][ T8232] __tcp_close+0x4c5/0xfe0 [ 1161.262689][ T8232] tcp_close+0x28/0x110 [ 1161.262711][ T8232] inet_release+0x143/0x190 [ 1161.262730][ T8232] sock_close+0xc3/0x240 [ 1161.262749][ T8232] ? __pfx_sock_close+0x10/0x10 [ 1161.262767][ T8232] __fput+0x44f/0xa60 [ 1161.262791][ T8232] task_work_run+0x1d9/0x270 [ 1161.262814][ T8232] ? __pfx_task_work_run+0x10/0x10 [ 1161.262841][ T8232] exit_to_user_mode_loop+0x193/0x680 [ 1161.262857][ T8232] ? rcu_is_watching+0x15/0xb0 [ 1161.262876][ T8232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.262894][ T8232] do_syscall_64+0x353/0x580 [ 1161.262912][ T8232] ? trace_irq_disable+0x3b/0x140 [ 1161.262937][ T8232] ? clear_bhb_loop+0x40/0x90 [ 1161.262955][ T8232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.262971][ T8232] RIP: 0033:0x7f858979ce59 [ 1161.262988][ T8232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1161.263002][ T8232] RSP: 002b:00007ffd362f4328 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1161.263019][ T8232] RAX: 0000000000000000 RBX: 00007ffd362f4410 RCX: 00007f858979ce59 [ 1161.263030][ T8232] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1161.263040][ T8232] RBP: 000000000011b352 R08: 0000000000000001 R09: 0000000000000000 [ 1161.263050][ T8232] R10: 0000001b33520000 R11: 0000000000000246 R12: 00007ffd362f4450 [ 1161.263062][ T8232] R13: 00007f8589a15fac R14: 000000000011b4b5 R15: 00007f8589a15fa0 [ 1161.263081][ T8232] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1161.535980][ T8239] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1161.631283][T27292] Bluetooth: hci2: command tx timeout [ 1161.654381][ T8034] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.072223][T29314] syz_tun (unregistering): left allmulticast mode [ 1162.114938][T29314] bond0: (slave syz_tun): Releasing backup interface [ 1162.168179][ T8034] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.282857][ T8034] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.382049][ T8034] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.421790][ T6137] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.498826][ T6137] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.662381][ T6137] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.749717][ T6137] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.865561][ T6137] bridge_slave_1: left allmulticast mode [ 1162.895107][ T6137] bridge_slave_1: left promiscuous mode [ 1162.901406][ T6137] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.912739][ T6137] bridge_slave_0: left allmulticast mode [ 1162.920187][ T6137] bridge_slave_0: left promiscuous mode [ 1162.927643][ T6137] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.129562][ T6137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1163.142317][ T6137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1163.153896][ T6137] bond0 (unregistering): Released all slaves [ 1163.423904][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1163.480936][ T6137] hsr_slave_0: left promiscuous mode [ 1163.488195][ T6137] hsr_slave_1: left promiscuous mode [ 1163.516905][ T6137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1163.525502][ T6137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1163.535163][ T6137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1163.543120][ T6137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1163.561594][ T6137] veth1_macvtap: left promiscuous mode [ 1163.568884][ T6137] veth0_macvtap: left promiscuous mode [ 1163.576523][ T6137] veth1_vlan: left promiscuous mode [ 1163.581847][ T6137] veth0_vlan: left promiscuous mode [ 1163.767909][ T6137] team0 (unregistering): Port device team_slave_1 removed [ 1163.790863][ T6137] team0 (unregistering): Port device team_slave_0 removed [ 1163.999838][ T5292] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1164.402485][T30509] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.458945][T30509] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.515020][T30509] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.559353][ T5292] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1164.642739][T30509] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.773002][T30509] bridge_slave_1: left allmulticast mode [ 1164.789158][T30509] bridge_slave_1: left promiscuous mode [ 1164.808060][T30509] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.822125][T30509] bridge_slave_0: left allmulticast mode [ 1164.834286][T30509] bridge_slave_0: left promiscuous mode [ 1164.840091][T30509] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.852586][T30509] team0: left promiscuous mode [ 1164.858038][T30509] team_slave_0: left promiscuous mode [ 1164.864045][T30509] team_slave_1: left promiscuous mode [ 1164.869806][T30509] bridge0: port 3(team0) entered disabled state [ 1164.892151][T30509] bridge_slave_1: left allmulticast mode [ 1164.902963][T30509] bridge_slave_1: left promiscuous mode [ 1164.910299][T30509] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.919965][T30509] bridge_slave_0: left allmulticast mode [ 1164.927705][T30509] bridge_slave_0: left promiscuous mode [ 1164.935034][T30509] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.069076][T30509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1165.080601][T30509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1165.092408][T30509] bond0 (unregistering): Released all slaves [ 1165.210124][T30509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1165.221875][T30509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1165.232451][T30509] bond0 (unregistering): Released all slaves [ 1165.242025][T30509] bond1 (unregistering): Released all slaves [ 1165.252877][T30509] bond2 (unregistering): Released all slaves [ 1165.265180][ T5292] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1165.655405][ T5292] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1166.039464][T30509] hsr_slave_0: left promiscuous mode [ 1166.048807][T30509] hsr_slave_1: left promiscuous mode [ 1166.055469][T30509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1166.076134][T30509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1166.098718][T30509] hsr_slave_0: left promiscuous mode [ 1166.110037][T30509] hsr_slave_1: left promiscuous mode [ 1166.116741][T30509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1166.124884][T30509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1166.135225][T30509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1166.142678][T30509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1166.157087][T30509] veth1_macvtap: left promiscuous mode [ 1166.162653][T30509] veth0_macvtap: left promiscuous mode [ 1166.169752][T30509] veth1_vlan: left promiscuous mode [ 1166.176070][T30509] veth0_vlan: left promiscuous mode [ 1166.385278][T30509] team0 (unregistering): Port device team_slave_1 removed [ 1166.399008][T30509] team0 (unregistering): Port device team_slave_0 removed [ 1166.496371][T30509] pim6reg (unregistering): left allmulticast mode [ 1166.636613][T30509] team_slave_1 (unregistering): left allmulticast mode [ 1166.646267][T30509] team0 (unregistering): Port device team_slave_1 removed [ 1166.657598][T30509] team_slave_0 (unregistering): left allmulticast mode [ 1166.665258][T30509] team0 (unregistering): Port device team_slave_0 removed [ 1166.726325][ T5292] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1167.229627][ T5292] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1167.631632][ T5292] 8021q: adding VLAN 0 to HW filter on device eth8