last executing test programs: 3.964862867s ago: executing program 4 (id=4249): r0 = socket(0x2b, 0x1, 0x1) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000004780), 0x2, 0x0) close(r1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x8d, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r4, 0x84, 0x0, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="280202f55177671569e10a00000001"], 0x18) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xd, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008881}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000110000000a00000a140000001100010000000000000000002100000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000180)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x201, 0x8001, 0x9, 0xff, 0x2, 0x0, 0x5}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 3.515413917s ago: executing program 4 (id=4254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xa2, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60fb351900680300000000000000000000000000000000fe8000000000000000000000000000bb330b000000000000d31a518000000cb702005c660000000000004c000000000000000100000000000000d9000001000000000000806b0000000002000000000000000001000101000401020710000000030200fbff01000000000000000001003200000000000000"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x29, 0x0, &(0x7f0000000100)) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r3, &(0x7f0000000040)={0x24, @long={0x2}}, 0x8) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180), &(0x7f0000000280)=0x8) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r1, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r5, 0x0, 0xffffffff004) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="120000000400000004000000a400000000000000", @ANYRES32, @ANYBLOB="eeffffffe8ffffffffffffff0000000000000026306c7c406bd247da4620a53600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x8010, r0, 0xad3000) sendmsg$nl_generic(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000236000100fcfffffffcdbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000080), &(0x7f00000002c0)=@tcp}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4ac}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.437858242s ago: executing program 0 (id=4257): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'wlan0\x00', 0x1000}) ioctl(r4, 0x8b32, &(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) 3.229615118s ago: executing program 1 (id=4259): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), r0) (async) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000300)={0x4, 0x10, [0x7fffffff, 0x5, 0x100, 0x4], &(0x7f00000001c0)=[0x0, 0x0]}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r4}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001240)=@newtfilter={0x1bbc, 0x2c, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2}, {0x5, 0xffe0}, {0xe, 0x10}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1b8c, 0x2, [@TCA_CGROUP_ACT={0x1b88, 0x1, [@m_nat={0x284, 0x0, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0xe, 0xffffffffffffffff, 0x1, 0x7}, @multicast1, @dev={0xac, 0x14, 0x14, 0x1a}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x101, 0x1000000d, 0x9, 0x3}, @private=0xa010102, @multicast2, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x400, 0x7f, 0x8, 0x9, 0xfbe5}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}, 0x1feffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x40, 0x6, 0xffffffffffffffff, 0x6, 0xa055}, @private=0xa010101, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1000, 0x8, 0x20000000, 0x8, 0x6}, @private=0xa010100, @broadcast, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xdd, 0x3, 0x9e31, 0x8}, @broadcast, @local, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x3, 0x2, 0xd2f4, 0x89c6}, @dev={0xac, 0x14, 0x14, 0x42}, @local, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x7f, 0x10000000, 0x5, 0x2}, @local, @rand_addr=0x64010101, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1000, 0x0, 0x2, 0x38}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x1}}]}, {0xf3, 0x6, "eda787fbc3b7e6e9fa1462cb25a5b58c071625c8e16550acfe5bd6205cabc013d9ac321b9334f429b7dce38736f3ed56f3bbdd6495be284630dcb44847b27dfb3abb6c5db77b8d88145bf4e2eb8ed03f6f33a9b9a83ba1b186c544f0e6a4955b40b02776661ba860e39bcf8c6ea050f389cb8e85c7f049617de1391d3a6e2e3fd98bcd5600a0226f5ffbbe6734398efa1682fb3c382d7f8dd815d7517dd9b40a44489f8373864fb203bc192910da8ba7f941591c69dc7a344ca28b04c2cd373292f46f201461eea723d0d80aaf5626df8b45145e0b0ebd0fa248124b374803a00ee09d8a87b7ef3401cb64f9a47e37"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0xa0, 0xe, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x896, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x12fc, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1c18}}]}, {0x4d, 0x6, "a7b8d13b2787956738fdb109b4c64c5ddad047fe7b473bdfaf6466a4e7d7701d2d8073102d7a9e6a4760fdb066590daf5b040b462da87002a97bec5da6d793df380f8bcfd7f046fa94"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x164, 0x1d, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x8, 0x20000000, 0x6, 0x801}}]}, {0x100, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x130, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x7, 0x20000000, 0x800, 0x1000}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81, 0x6c2a, 0x20000000, 0x8}, 0x7f}}]}, {0xc7, 0x6, "500f7b1529f679055152ce08f75ecd806b4fbd27fcabbf3b1b85da8d619bad787fe78927466dd28571e5b11be4de13d5cfc488b99e8595205ab1b020ee6e7b874c8b58f04137077a376889a720b1c6a6a40b0b7f1ccabdd973533beed057be2cbb4bc44bbec816a4ddf5f0b285bd6447d2509addc16c271f326973f5f4d7d90036978b02d7ecc2e02e5165121ae646edf88a470482ba34dab4b1b25408abdbb56a4163b363543c2b1b9c2669a197a158d00b87699e810833252bc9a3ffd4b18b151150"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_mirred={0x1c8, 0x10, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x4, 0xffffffffffffffff, 0x9, 0x7}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xffff, 0x5, 0x9, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x29, 0xb, 0x4, 0xb3, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x3ff, 0x8, 0x8001, 0x4}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4, 0x1, 0x2, 0x80d}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x7fff, 0x6, 0x7ad, 0x2}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000001, 0x1, 0x5, 0x7e3, 0x69}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xff, 0x4, 0x8, 0xf, 0x1}, 0x2}}]}, {0x9a, 0x6, "7a878071bebd5a5a7cd77fd75e0cfb1a81c692f971dc79a9706e6fa7c84c54b96ce1fd97b765ece5fa80e6529820eb89170868575f1098d9e1d33870932e4898363ca108afc9f0939170bbf8de81990ada2fea7e29bb7982e826b98e204346bd3f6ec758be7506f88ff0404acdc4de5dfd57632a32fb37bfe11a0da0f83b236c38639a23fee23b36b7a90e0d38fbc249f231c2d8225a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0x108, 0x1d, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x80000000, 0x9, 0x6, 0xc0000000, 0x1}, @dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010102, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x2, 0x10000000, 0x7fff, 0x4}, @local, @private=0xa010102, 0xffffff00, 0x1}}]}, {0x8e, 0x6, "b7f44fe1d88b7460868a3c0d3bf2d15a5b09ee5271d673eb85cb4eeba101af68e155bb58fec6ab48acf455a1bc15904515730bab0ee02929794a29edeafda2fe72de5af40993c572ba6a2dcde3e7f2ef7bb63d2b80da320b8ecd0c962b5f4527fa256b8a496f29377baddcf69081e98894a4130f428f1b8afd3ac4cd9cdc67c3eee5a12016ea425b0000"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x7}}}}, @m_ife={0x1054, 0x14, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xffff, 0x6, 0x4, 0x5, 0xc8}}}, @TCA_IFE_SMAC={0xa}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_nat={0x23c, 0xe, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffc, 0x0, 0x1, 0x8692, 0x7ff}, @multicast2, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x3, 0x8, 0x4, 0xa87}, @private=0xa010102, @multicast1, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x0, 0x5, 0xfffffff8, 0xc}, @empty, @local, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x0, 0xffffffffffffffff, 0x101, 0x6}, @local, @local, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x7ff, 0x7, 0x7f, 0x6}, @private=0xa010102, @multicast1, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x0, 0x3, 0x40, 0xffffffff}, @loopback, @private=0xa010100, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xe, 0x8, 0x1, 0x2}, @multicast2, @dev={0xac, 0x14, 0x14, 0x32}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff62d2, 0x7f, 0xffffffffffffffff, 0x6, 0x4}, @private=0xa010100, @multicast2, 0xffffffff}}]}, {0xd3, 0x6, "960051636dc34cb534bccaa60d41dd3302d9d004a59df6b5788f32ca48342cd6c43082e12d29c5d59ce6e67528ca0ff95581788827399fd4f671d118aa22ac6f4c490a8ec11fb16a6ad77b19092ed86641c2ef559b9063ddc7a6f4c9da4ca1de1e32ec849b14984ee9b77b03f235126285c0253602deb7431c036e155545274ace6ae71942c946480b3bc6c3dd630703896ab9d74d1a916dabe393a9c5502e28ac210170dc0cfcf49416025c902b30eb4d8ffb91e290215db616249e7366368721f221708104cd2db6aaec04fbceee"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0x6c, 0x10, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, '#\x1e}\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0xfffffffffffffffc, 0x9fee, 0x7f}}, @TCA_DEF_DATA={0x6, 0x3, '\\\x00'}]}, {0x17, 0x6, "91eb506aeda75bff3088c5b609d3ad4870dce7"}, {0xc, 0x7, {0x0, 0x40039b712de528f3}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x1bbc}, 0x1, 0x0, 0x0, 0x810}, 0x20008000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="03bc3072672b4f137154744af19b1804fc8e69f5f7244d277c77cbc6a3f78b893ca3c9f9647fa5f0cc822131c614d4e692fc02f56f5f53ac0db3b1e90f71de86b7072d56e61e342717d3e9e3d7f3d724f089d226889a4697a9ea5a544788200c686e66805270fe5f07c860eff97598bded3f16d46479d62b481095f96757cd6b904fde01d288fbb37a", @ANYBLOB="04bb355e79c9025d924f082138901e147754cd8e3c295e9bfb48542368c0afd9589b0c78685577df96c7990c14b4479452de638cbdff334c2e69c71ad733a7756fcfb53b448c1f64a79f15d8e0306f6f32cd6325430020a00f382c670bc29dc45ef93164cf0a27797e9f04bfbfedd6923787c09b70380485be560c1c0d8300f74a7acca638cfd0c46fe56f429c463eaa82b912430e619c7ad7b8bf1bb61f4528ad709122601e86bccf3dfb9312ad73e38c7572f307c80df312aebb1f93ecc431faa1cef603e073760677cab6d7a240da9fa1c47d", @ANYBLOB="a99cbbbdfb691c159e092ad788ad21fb461a461a7ba5f0b9a4e4e19b114f896ecfcbc2cb1d8cbd7c7a4156a88a21a708bf780912d49d891250ef7443fc48f76eb58d6482335cde25695ec5d03c3dae2fd2e8f1c31d71d93aae3d6b047e627b56ca301ad0d87c83d97cd6eb431b0148b9110c3851e55203244ae4c835c2122e86b13a06571753910a90496c8f7d6f7a2359996864ee4ce6cd39736d107631c318e77a", @ANYRESOCT=r2], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000180)={0x0, 0xea60}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) read$alg(0xffffffffffffffff, &(0x7f0000000600)=""/25, 0x19) (async, rerun: 64) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r8) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r12 = accept4(r11, 0x0, 0x0, 0x0) sendmsg$alg(r12, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00082bbd7000fddbdf25020000af5b7b7643fb910008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20) sendmsg$nl_route_sched_retired(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@delqdisc={0x10c, 0x25, 0x800, 0x70bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd, 0x3}, {0x0, 0x9}, {0x1, 0xffe0}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x0, 0x1, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xff}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7f}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9d}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}]}}]}, 0x166}, 0x1, 0x0, 0x0, 0x8004}, 0x0) recvmmsg(r12, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/223, 0xdf}, {&(0x7f0000000840)=""/127, 0x7f}], 0x2}, 0x101}], 0x1, 0x60, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r9, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) (async, rerun: 32) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd70dffddbdf25010000000000000009410000004c00180000000462726f6164636173742d6c696e6b00000000000000000000000000000000000000000000516fcb2a7dd4310000000000000000000000000000000000000000000000000000000000000000afd5c7366d98e3c6f4be906c962c33c5312e39051a829f74332b7ddd1bbc"], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000007110b9000000000006300000000000009500aa000000e7006e62e4739ff96f5c22a9ee645cbbfd2b95af47c2e0fd35adcca674695558363ca8e980a238b8dcd490d774b5784c001555c5a669c2201680728572dadd3dbdae78da98984bbe2338bd392824f0f21677410221c5d2ba6f4196cba6111b36823259d3515fd7a1c62e"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3.031489175s ago: executing program 0 (id=4261): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000004dc0), &(0x7f0000004e00)=0x8) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x7800, 0x20, 0x9, 0x80000001, {{0x2c, 0x4, 0x0, 0x9, 0xb0, 0x66, 0x0, 0x2, 0x29, 0x0, @multicast1, @rand_addr=0x64010102, {[@generic={0x94, 0xb, "581f82285bc2c23140"}, @rr={0x7, 0xf, 0x73, [@broadcast, @multicast2, @multicast1]}, @noop, @timestamp_addr={0x44, 0x1c, 0xa7, 0x1, 0x1, [{@rand_addr=0x64010102, 0x5}, {@loopback, 0x6}, {@broadcast, 0xc0}]}, @timestamp_addr={0x44, 0x44, 0xef, 0x1, 0x1, [{@remote, 0x6}, {@empty, 0xff}, {@loopback, 0x200}, {@private=0xa010102, 0x7}, {@multicast1, 0x6}, {@local, 0x1}, {@remote, 0x8}, {@loopback, 0x800}]}, @timestamp_prespec={0x44, 0x14, 0xc8, 0x3, 0xf, [{@empty}, {@local, 0x7ff}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x1c, 0x0, 0x0, [0x5]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x2, 0xb, 0x3, 0x3, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x40, 0x10, 0x5, 0x4}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c6dd07f57bc1ab7be9c43553cb9c814f52c947cb378cbc208b7dccb7def0579cbbef99ce00f5d924676a175ee6106764f46919005c5b3117fc914d6ff0c380f8a3d38ff999cb334d80243833bbf405f9dc", @ANYRES16=r4, @ANYBLOB="00022cbd7000fbdbdf2504000000080003000300000048000180080003000000000008000700", @ANYRES32=r5, @ANYBLOB="14000400fe880000000000000000000000000101050002000200000008000300ac14142e08000700", @ANYRES32=r6, @ANYBLOB="060005004e22000004000180080004000800000008000200050000000400018008000200060000000800020002000000"], 0x8c}, 0x1, 0x0, 0x0, 0x20040080}, 0x8000) getsockopt$sock_buf(r3, 0x1, 0x1f, &(0x7f00000004c0)=""/145, &(0x7f0000000580)=0x91) close(0x3) 2.917602279s ago: executing program 1 (id=4263): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x9, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xc}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x44001}, 0x44840) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x12, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r9, r11, 0x25, 0x8, @void}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2f, 0xde, 0xf, 0x9, 0x44, @loopback, @remote, 0x80, 0x40, 0x8, 0x5}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000440)={@initdev, @empty, 0x0}, &(0x7f0000000480)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0x1, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x6, 0x3, 0x5, @private0, @local, 0x20, 0x7, 0x5, 0x5c}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000680)=0x14) r19 = socket$netlink(0x10, 0x3, 0x0) r20 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r20, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r19, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r21, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="000325bd7000fedbdf25040000004800018008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000080003000300000008000300000000001400020076657468305f766972745f776966690008000100", @ANYRES32=r7, @ANYBLOB="4c00018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="0800030003000000140002006d61637365633000000000000000000014000200636169663000000000000000000000003400018014000200766c616e31000000000000000000000014000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="7c0001801400020076657468305f746f5f7465616d0000001400020076657468305f766c616e00000000000008000100", @ANYRES32=r13, @ANYBLOB="0800030000f618de030a243d08657468315f746f5f687372000000001400020076657468305f746f5f7465616d0000000800010051f9dba4418473dac4f792ebf3f00dc4b4467e8568c3e3", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="4800018008000100", @ANYRES32=r17, @ANYBLOB="0800030002000000140002007465616d5f736c6176655f30000000000800030000000000080003000200000008000100", @ANYRES32=r18, @ANYBLOB="0800030002000000280001801400020065727370616e3000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r21, @ANYBLOB], 0x1c8}, 0x1, 0x0, 0x0, 0x1}, 0x4000804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="3800000000000000000000000000000061122e00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 2.15497062s ago: executing program 4 (id=4267): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, @in={0x2, 0x4e24, @rand_addr=0x64010100}, @in={0x2, 0x4e24, @local}], 0x3c) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x20008844) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e1f, 0x84a2, @mcast2, 0x5}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x0) write$nbd(r5, &(0x7f0000000080)={0x67446698, 0x0, 0x1, 0x2, 0x4}, 0x10) recvmmsg(r5, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000008c0)=""/36, 0x24}], 0x1}, 0x8}], 0x1, 0x10000, 0x0) recvmsg$can_raw(r5, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x2040) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) listen(r5, 0xc) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000400)={0xffffffff, {{0xa, 0x4e22, 0xde3, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}}, 0x5a37118edfe78675, 0x4, [{{0xa, 0x4e21, 0x4, @local, 0x8}}, {{0xa, 0x4e21, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffff000}}, {{0xa, 0x4e24, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x67}}, {{0xa, 0x4e22, 0x81, @loopback, 0x1ef}}]}, 0x290) syz_emit_ethernet(0x3a, &(0x7f00000003c0)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 2.082997056s ago: executing program 1 (id=4268): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x16, 0xff, 0x0, @empty}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000000000000000000a00000e0998cee3b28c17c0762054e3f6e4ad7b2800020073797a3100797a31000000004c0004"], 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000094000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000f8ff5b0004"], 0x130}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 2.077714543s ago: executing program 0 (id=4269): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000640)={0x2ddf11b3, {{0xa, 0x4e23, 0x1, @remote, 0x780}}}, 0x90) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="11000000", @ANYRES16=r4, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5) (async, rerun: 64) sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000091}, 0x4810) (async, rerun: 64) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000440), 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c26881100000000000000e3394553b9851b30599980bc000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000001d40)=""/4054, 0xfd6}, {&(0x7f0000000d40)=""/4095, 0xfff}, {&(0x7f00000001c0)=""/226, 0xe2}, {&(0x7f0000000680)=""/112, 0x70}, {&(0x7f0000003140)=""/210, 0xd2}], 0x5}, 0x40010000) (async) write$nci(r0, &(0x7f0000000640)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x1, 0x2, 0x0, 0x2, {0x0, 0xad}}, 0x5) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r9, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000540)={'wpan1\x00', 0x0}) (async, rerun: 64) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r11) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x38, r12, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}]}, 0x38}, 0x4, 0x700000000000000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x4484) 1.863092997s ago: executing program 2 (id=4271): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ppoll(&(0x7f0000000100)=[{r0, 0x2}, {r0, 0xa063}], 0x2, 0x0, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000c11d1e90c2118c3fa12e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) pipe(&(0x7f0000000040)) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000080), &(0x7f0000000280)=r4}, 0x20) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, r6}, 0x14) (async) syz_emit_ethernet(0x46, &(0x7f0000000700)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x2b, 0x0, @private2, @local, {[], {0x2100, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x6, 0x100, @val=0x80}}}}}}}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x50, r2, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000080) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r9, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 1.68982788s ago: executing program 1 (id=4273): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001100000000000000400000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) 1.689129395s ago: executing program 2 (id=4274): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x1, 0x0, 0xff, 0x6, 0x6, 0xffff}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) ioctl(r0, 0x8b32, &(0x7f0000000040)) 1.688759102s ago: executing program 0 (id=4275): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000040)=0xffffffffffffffff, 0x12) poll(&(0x7f0000000080)=[{r0, 0x40a}, {r0, 0x425}, {r0, 0x1001}, {r0, 0x80}], 0x4, 0x2f) syz_80211_join_ibss(&(0x7f00000000c0)='wlan0\x00', &(0x7f0000000100)=@default_ap_ssid, 0x6, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000180)=@data_frame={@a_msdu=@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x7}, @device_a, @broadcast, @from_mac, {0x9, 0x9}, "", @value={0x8, 0x0, 0x2, 0x1, 0x5}, @value=@ver_80211n={0x0, 0x7e44, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x1d5) syz_80211_inject_frame(&(0x7f0000000380)=@device_b, &(0x7f00000003c0)=@data_frame={@a_msdu=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x81}, @random="6ce986c97acb", @broadcast, @from_mac=@broadcast, {0x1, 0x3}}, @a_msdu=[{@broadcast, @broadcast, 0xbe, "83b9ed84decab4c3465679d423b5fb6abd02457b4ac29d3e09390e468830aa45178b4360320a54b0340c689b303974b33cf1193525a3509dbbb1b8ff999d56bbc56f5f08fad9a13375fac4001b6dbea6cb5beb8ecb13ca2018c4b269920ea2b773967b760da679f83500aa7ed2201e44a9296a7b5e16220675f43031258c17969ad385e5b069db6e4119d3d88cdb808bf6d7af5b93026593ae55307675460fc0e99e030ed057d85dad60ab6b0c6d15c9b2f382be9b6264198ebeb95dfc0a"}]}, 0xe4) syz_80211_inject_frame(&(0x7f00000004c0), &(0x7f0000000500)=@ctrl_frame=@bar={{}, {0x1}, @device_a, @device_a, @basic={{0x0, 0x0, 0x0, 0x0, 0xf}, {0x5, 0xd99}}}, 0x14) syz_80211_join_ibss(&(0x7f0000000540)='wlan0\x00', &(0x7f0000000580)=@default_ap_ssid, 0x6, 0x2) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0xf, 0x100, @l2={'eth', 0x3a, 'bond0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x808) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000006c0)=0x9, 0x4) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000700)=0x10) r3 = socket(0x25, 0x2, 0x6) syz_emit_ethernet(0x5a, &(0x7f0000000740)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@canfd={0xd, {{0x2}, 0xa, 0x4, 0x0, 0x0, "b06d9049acee9931e6625eff592965e352cb56b0e82836739c6c4db7e09bea5dd55fd619ddf10d24d41a16d379c52de7257d92aa66d389685908cef21fcd7192"}}}}, &(0x7f00000007c0)={0x0, 0x2, [0x336, 0x41, 0x25e, 0x1c9]}) r4 = socket$netlink(0x10, 0x3, 0xb) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r4) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000840), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000880), 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000009c0)={r4, &(0x7f00000008c0)='!\x00', 0x8002, &(0x7f0000000900)={@align=0x1, {0xbf, 0x2, 0x80, 0x3}}, 0xfffffffe, &(0x7f0000000940)={@_ha_fsid}, &(0x7f0000000980)=0x4}) close(0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wg1\x00', 0x0}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a40), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x7, 0x9, 0x3, 0x7, 0x2, r6, 0xa, '\x00', r7, r8, 0x1, 0x0, 0x5}, 0x50) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) write$6lowpan_enable(r6, &(0x7f0000000b80)='0', 0x1) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000bc0)={'veth0_to_bridge\x00', @remote}) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8982, &(0x7f0000000c00)) 1.533079212s ago: executing program 1 (id=4276): mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=ANY=[@ANYBLOB="28000000140007012cbd7000ffdbdf25057c0000080000100000dd800c000380060009005b004000"], 0x28}, 0x1, 0x0, 0x0, 0x10000004}, 0x4008030) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) bind$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r2 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000340)=ANY=[], 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x6}, {0xfff8, 0xffff}, {0xc, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x200048d4) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xfff1, 0xffff}, {0xfff2}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x3, 0x5, 0x1ffff}, 0x10}, 0x94) 1.527751883s ago: executing program 3 (id=4277): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000d2816d7fefbda0b36ce7", @ANYRES16=r2, @ANYBLOB="00042cbd7000bbdbdf25090000000c009900020000006800000008006e8004000200"], 0x28}, 0x1, 0x0, 0x0, 0x8054}, 0x4840) close(r0) r3 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r3, &(0x7f0000000200)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000100100000100000064"], 0x18}, 0x0) sendmsg(r3, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000000000200010010000010000006400000000000000140000000000000010010000020000000100000000000000"], 0x2c}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=@can_delroute={0x1c, 0x19, 0x200, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x5}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd2c, 0x25dfdbff, {0xa, 0x18, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r8, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000125bd7000fcdbdf25130000004c00018008000100", @ANYRES32=r7, @ANYBLOB="1400020076657468315f766c616e000000000000140002006e72300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000300000000003c00018014000200766c616e30000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="080003000100000014000200726f73653000"/28], 0x9c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r9, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_to_hsr\x00', 0x1}, 0x18) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) recvmsg(r3, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x0) 1.457549106s ago: executing program 2 (id=4278): r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000040)) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000180)={r0, &(0x7f0000000080)='\'$^\x00', 0x48000, &(0x7f00000000c0)={@align=0x4, {0x10, 0xd, 0x2, 0x1}}, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x8}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000001c0)={'bond0\x00', @broadcast}) r2 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000200), &(0x7f0000000240)=0x4) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000280)=0x5, 0x4) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f00000002c0)={0xffffffffffffffff, 0x1, 0xf8, 0x0, 0xfffffffb}, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x18, r3, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x2, 0x6, 0x50, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x21}, 0x60, 0x1, 0x0, 0x200}}) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000500)={0x1, 0x1, 0x1, r4, 0x6}, 0xc) ioctl$TUNSETLINK(r1, 0x400454cd, 0x1b) listen(r0, 0x1) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) getsockopt(r0, 0x6, 0x5, &(0x7f0000000540)=""/248, &(0x7f0000000640)=0xf8) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000680)=0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc080}, 0x80) r5 = socket$netlink(0x10, 0x3, 0xe) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f0000000880)={0x1, 0xb623}) listen(0xffffffffffffffff, 0x6) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f00000008c0)=0xa, 0x4) r7 = accept4$phonet_pipe(r1, &(0x7f0000000900), &(0x7f0000000940)=0x10, 0x80800) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000980)) getsockopt$netlink(r1, 0x10e, 0x4, &(0x7f00000009c0)=""/107, &(0x7f0000000a40)=0x6b) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x5) r8 = accept(r6, &(0x7f0000000b80)=@l2tp={0x2, 0x0, @multicast2}, &(0x7f0000000c00)=0x80) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x44, 0x3, 0x8, 0x702, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9000}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x188}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44001) 1.168869713s ago: executing program 3 (id=4279): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x110, 0x2e0, 0x2e0, 0x110, 0x2e0, 0x4, 0x0, {[{{@arp={@multicast2, @empty, 0x0, 0x0, 0x3, 0xe, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@remote}, 0x4, 0x5, 0xfff8, 0x91fe, 0x3, 0x0, 'bridge0\x00', 'veth1_to_bond\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0xff000000, 0xa, 0x2, {@mac=@random="0acc9bdf614c", {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x4, 0xfff7, 0x2, 0xf, 0xb, 0x0, 'veth0_to_bond\x00', 'pimreg1\x00', {}, {}, 0x0, 0x282}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0xfffa}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async) r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0xd1383000) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) (async, rerun: 32) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) (rerun: 32) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 1.079339221s ago: executing program 2 (id=4280): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0xc, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 901.853901ms ago: executing program 4 (id=4281): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) (async) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) listen(r2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) (async) listen(r7, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r10 = socket$inet_sctp(0x2, 0x1, 0x84) socket(0x1d, 0x2, 0x6) (async) r11 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r11, &(0x7f0000000380)={0x1d, 0x0, 0xfffffffffffffffe, {0x0, 0x0, 0x1}, 0xfd}, 0x18) (async) bind$can_j1939(r11, &(0x7f0000000380)={0x1d, 0x0, 0xfffffffffffffffe, {0x0, 0x0, 0x1}, 0xfd}, 0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x5, 0x60c, 0x5, 0x3, 0x0}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f00000001c0)={r12, 0x9}, 0x8) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f00000001c0)={r12, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) shutdown(r10, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f0000000200)={0x4, 0x8, 0x9ba2bf28609cf708, 0x5, 0x0, 0x2, 0x441a, 0x81}, &(0x7f0000000240)=0x20) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x63}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x63}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) 901.490258ms ago: executing program 3 (id=4282): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)={0x4c, r4, 0x1, 0x70bd2a, 0x0, {0x4e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab, 0xfffffffc}}, {0x8, 0xb, 0x60a7}, {0x6, 0x11, 0x2}}]}, 0x4c}}, 0x4004880) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20008000) (async) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) 871.743435ms ago: executing program 2 (id=4283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d000000000000000101000005000100080000000800"], 0x2c}}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL, @IPSET_ATTR_REVISION={0x5}]}, 0xffffffffffffffd9}}, 0x4000040) (async, rerun: 32) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)={0x28, r3, 0x1, 0x0, 0x25dfdbfd, {{0x8}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x1}}}}}, 0x28}}, 0x0) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4014}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x48000) (async, rerun: 64) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000280)={0x8, 0x1, 0x1, 0xec, 0x5, 0x0, [{0x8, 0xd, 0x7, '\x00', 0x1d00}, {0xf19, 0x6, 0x2, '\x00', 0x8}, {0x8, 0x7fffffffffffffff, 0xfffffffffffffffd, '\x00', 0x884}, {0xb, 0x4, 0xf, '\x00', 0x4}, {0x7, 0x3, 0x2, '\x00', 0x2e08}]}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async, rerun: 32) socket(0x27, 0x80000, 0x0) (async, rerun: 32) socket$igmp6(0xa, 0x3, 0x2) 780.865641ms ago: executing program 3 (id=4284): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000008500000019000000958e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xf87, &(0x7f0000000000)=ANY=[], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) 565.691989ms ago: executing program 4 (id=4285): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000008800)=[{&(0x7f0000000080)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f00000002c0)="776b08de", 0x4}], 0x1, &(0x7f0000000440)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x8, 0x8, 0xf}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x81}}], 0x38, 0x4040000}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xffff, 0x10001, 0x9d7b}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={r2, 0x48, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x17, @private1, 0x9}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e22, 0xa, @local, 0x3}]}, &(0x7f0000000100)=0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$can_j1939(0x1d, 0x2, 0x7) accept(r5, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000140000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 513.974627ms ago: executing program 3 (id=4286): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000088000000b7030000000800008500000010000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 513.589365ms ago: executing program 2 (id=4287): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)=0x3dbc, 0x4) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010065bd7000ffdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="24002d8005000100030000000500040000000000080002"], 0x40}, 0x1, 0x0, 0x0, 0x24880}, 0x4000880) 470.992178ms ago: executing program 0 (id=4288): r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x93}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000040)=0x207, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 281.26859ms ago: executing program 3 (id=4289): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000f3ff00000010"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 230.445046ms ago: executing program 0 (id=4290): r0 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x3c, r0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000002}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x24040021) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x23, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@generic="18461ba8c6906e2a1490d05667", @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a6", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x14, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f00000003c0)={r1, &(0x7f0000000140)='\x00', 0xae99e96d74ebfe7a, &(0x7f0000000180)={@_ha_fsid={[0x7, 0x8]}, {0x6, 0x1, 0x200, 0x8000}}, 0x6, &(0x7f0000000340), &(0x7f0000000540)=0x8}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x80, r0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x800}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe0c}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x2000c040}, 0x480c4) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000580140006"], 0x3c}, 0x1, 0x0, 0x0, 0x20000054}, 0x4004000) 229.954006ms ago: executing program 4 (id=4291): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x2c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_CMD={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x22}]}, 0x2c}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) (async, rerun: 32) r4 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) setsockopt$packet_int(r4, 0x107, 0x12, &(0x7f0000000000)=0x3, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x2b, 0x0, "ea570d524ea27f52afcde75a54f590a97522eb199c6a9066000c89cb377ef741e509f166c986f3c28163c0863c0430b05d52a597e4ae60cf7f10ea04b6fbade3394436d9ed668b9e896664cde8cc3957"}, 0xd8) 0s ago: executing program 1 (id=4292): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003e000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x104, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$bt_hci(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000320100f1"], 0x138) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000240), 0x4) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f00000000c0)) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r2, 0x4) kernel console output (not intermixed with test programs): ng attributes in process `syz.1.2888'. [ 408.777900][T16690] lo: entered allmulticast mode [ 408.816531][T16501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.992648][ T5627] Bluetooth: hci5: command tx timeout [ 409.004067][T16685] lo: left allmulticast mode [ 409.185283][T16701] netlink: 'syz.1.2892': attribute type 1 has an invalid length. [ 409.214655][T16501] team0: Port device team_slave_0 added [ 409.286298][T16701] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 409.292761][T16501] team0: Port device team_slave_1 added [ 409.317190][T16698] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2891'. [ 409.425165][T16715] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2894'. [ 409.549158][T16501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.585912][T16501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.666123][T16501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.747171][T16501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.790481][T16501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.913163][T16501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.229158][T16730] netlink: 'syz.1.2898': attribute type 1 has an invalid length. [ 410.242987][T16501] hsr_slave_0: entered promiscuous mode [ 410.252578][T16729] sctp: [Deprecated]: syz.0.2901 (pid 16729) Use of struct sctp_assoc_value in delayed_ack socket option. [ 410.252578][T16729] Use struct sctp_sack_info instead [ 410.273894][T16501] hsr_slave_1: entered promiscuous mode [ 410.299167][T16730] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2898'. [ 410.311364][T16501] debugfs: 'hsr0' already exists in 'hsr' [ 410.317179][T16501] Cannot create hsr debugfs directory [ 410.333970][T16730] netlink: 'syz.1.2898': attribute type 1 has an invalid length. [ 411.071993][ T5627] Bluetooth: hci5: command tx timeout [ 411.415338][T16501] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.492535][T16501] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.548554][T16501] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 39169 - 0 [ 411.682311][T16774] __nla_validate_parse: 4 callbacks suppressed [ 411.682333][T16774] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2909'. [ 411.999160][T16501] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.055587][T16501] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.093344][T16501] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 39169 - 0 [ 412.335977][T16501] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.359248][T16501] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.406812][T16501] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 39169 - 0 [ 412.419177][T16789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2914'. [ 412.465246][T16789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2914'. [ 412.574839][T16789] netlink: 'syz.1.2914': attribute type 12 has an invalid length. [ 412.604971][T16789] netlink: 'syz.1.2914': attribute type 11 has an invalid length. [ 412.646919][T16501] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.678805][T16501] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.705082][T16501] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 39169 - 0 [ 412.985315][T16810] openvswitch: netlink: Message has 185 unknown bytes. [ 413.279211][T16813] xt_nat: multiple ranges no longer supported [ 413.295146][T16813] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2920'. [ 413.607350][T16501] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 413.629432][T16823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2922'. [ 413.651767][T16823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2922'. [ 413.662136][T16823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2922'. [ 413.676392][T16501] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 413.709025][T16501] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 413.784435][T16501] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 413.840314][T16501] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 413.913887][T16501] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 413.944075][T16830] netlink: 'syz.4.2925': attribute type 10 has an invalid length. [ 413.960300][T16501] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 414.003426][T16501] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 414.622648][T16501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.663907][T16851] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2929'. [ 414.725410][T16856] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2931'. [ 414.763513][T16501] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.775163][T16857] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2930'. [ 415.010350][T16856] bond9 (unregistering): Released all slaves [ 415.300280][T16859] team0 (unregistering): Port device team_slave_0 removed [ 415.361556][T16859] team0 (unregistering): Port device team_slave_1 removed [ 415.426886][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.434179][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.590492][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.598714][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.642614][T16894] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 416.783158][T16896] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 417.448896][T16912] __nla_validate_parse: 1 callbacks suppressed [ 417.448951][T16912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2945'. [ 418.245546][T16934] netlink: 'syz.2.2949': attribute type 9 has an invalid length. [ 418.269352][T16934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2949'. [ 418.289450][T16934] netlink: 'syz.2.2949': attribute type 9 has an invalid length. [ 418.315064][T16934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2949'. [ 418.409933][T16937] netlink: 'syz.4.2950': attribute type 1 has an invalid length. [ 418.572724][T16942] openvswitch: netlink: Missing valid actions attribute. [ 418.840044][T16501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.983446][T16955] netlink: 'syz.2.2953': attribute type 28 has an invalid length. [ 419.053877][T16955] netlink: 'syz.2.2953': attribute type 3 has an invalid length. [ 419.131799][T16501] veth0_vlan: entered promiscuous mode [ 419.139183][T16955] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2953'. [ 419.294599][T16501] veth1_vlan: entered promiscuous mode [ 419.535104][T16501] veth0_macvtap: entered promiscuous mode [ 419.566507][T16962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2956'. [ 419.578127][T16962] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2956'. [ 419.599966][T16501] veth1_macvtap: entered promiscuous mode [ 419.708963][T16501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.819469][T16501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.964650][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.990257][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.063306][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.143177][T16976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2960'. [ 420.171167][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.213362][T16976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2960'. [ 420.223559][T16976] netlink: 'syz.4.2960': attribute type 12 has an invalid length. [ 420.233201][T16976] netlink: 'syz.4.2960': attribute type 11 has an invalid length. [ 420.669978][T16982] bond6: option min_links: invalid value (18446744073709551614) [ 420.705195][T16990] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2963'. [ 420.733133][T16982] bond6: option min_links: allowed values 0 - 2147483647 [ 420.740398][T16990] netlink: 'syz.0.2963': attribute type 7 has an invalid length. [ 420.756871][T16982] bond6 (unregistering): Released all slaves [ 420.772030][T16990] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2963'. [ 422.473520][T17019] __nla_validate_parse: 65 callbacks suppressed [ 422.473540][T17019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2969'. [ 422.632614][T17023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2970'. [ 422.953369][T16968] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 423.055950][T17013] netlink: 59 bytes leftover after parsing attributes in process `syz.0.2967'. [ 423.088648][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.130181][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.376340][ T6924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.423512][ T6924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.980152][T17045] tun0: tun_chr_ioctl cmd 1074025675 [ 424.017828][T17045] tun0: persist disabled [ 424.070420][T17048] tun0: tun_chr_ioctl cmd 1074025673 [ 424.551310][T17056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2981'. [ 424.646921][T17059] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2982'. [ 424.825469][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 424.847708][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 424.858040][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 424.881843][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 424.899041][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 425.244494][T17075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2985'. [ 425.251259][T17073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2986'. [ 425.354188][T17078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2986'. [ 425.891717][T17089] No such timeout policy "syz0" [ 425.949633][T17089] netlink: 'syz.2.2988': attribute type 1 has an invalid length. [ 426.293431][T17089] 8021q: adding VLAN 0 to HW filter on device bond6 [ 426.990833][ T5627] Bluetooth: hci1: command tx timeout [ 427.373853][T17125] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2995'. [ 427.465113][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.513025][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.550162][T17134] RDS: rds_bind could not find a transport for ::ffff:172.20.20.55, load rds_tcp or rds_rdma? [ 427.565911][T17132] openvswitch: netlink: EtherType 2 is less than min 600 [ 427.653555][T17132] xt_TCPMSS: Only works on TCP SYN packets [ 427.757390][T17118] netlink: 'syz.2.2995': attribute type 1 has an invalid length. [ 427.835385][T17118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2995'. [ 428.010230][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.047727][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.136727][T17147] netlink: 'syz.3.3000': attribute type 12 has an invalid length. [ 428.178312][T17147] netlink: 'syz.3.3000': attribute type 29 has an invalid length. [ 428.189818][T17147] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3000'. [ 428.215453][T17147] netlink: 59 bytes leftover after parsing attributes in process `syz.3.3000'. [ 428.632373][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.675263][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.775941][T17152] veth1_to_bond: entered allmulticast mode [ 428.799849][T17164] openvswitch: netlink: Tunnel attr 4 has unexpected len 0 expected 1 [ 428.883169][T17153] veth1_to_bond: entered promiscuous mode [ 429.040216][T17173] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3006'. [ 429.072511][ T5627] Bluetooth: hci1: command tx timeout [ 429.334755][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.396061][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.638214][T17155] veth1_to_bond: left promiscuous mode [ 429.661249][T17155] veth1_to_bond: left allmulticast mode [ 430.052933][T17200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3012'. [ 430.159973][T17202] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3012'. [ 430.257205][T17202] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3012'. [ 430.417983][T17200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3012'. [ 430.742061][T17213] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3015'. [ 431.152928][ T5627] Bluetooth: hci1: command tx timeout [ 431.358897][T17213] bond0: option mode: invalid value (10) [ 431.407794][T17213] bond0 (unregistering): Released all slaves [ 431.796729][T17222] bridge4: entered promiscuous mode [ 431.829093][T17222] bridge4: entered allmulticast mode [ 431.927008][T17241] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3021'. [ 432.288699][ T57] bridge_slave_1: left allmulticast mode [ 432.323133][ T57] bridge_slave_1: left promiscuous mode [ 432.347120][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.412817][ T57] bridge_slave_0: left allmulticast mode [ 432.418588][ T57] bridge_slave_0: left promiscuous mode [ 432.487252][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.627061][ T57] vcan0: left allmulticast mode [ 432.647019][ T57] dvmrp1: left allmulticast mode [ 432.653803][ T57] dvmrp8: left allmulticast mode [ 432.664918][ T57] tipc: Resetting bearer [ 433.093204][ T57] tipc: Disabling bearer [ 433.214362][ T57] bond1 (unregistering): (slave gretap1): Releasing active interface [ 433.250935][ T5627] Bluetooth: hci1: command tx timeout [ 433.425546][ T57] bond1 (unregistering): Released all slaves [ 433.450078][ T57] bond2 (unregistering): Released all slaves [ 433.548960][ T57] bond0 (unregistering): Released all slaves [ 433.573550][ T57] bond3 (unregistering): Released all slaves [ 433.602778][ T57] bond4 (unregistering): Released all slaves [ 433.651198][ T57] bond5 (unregistering): Released all slaves [ 433.701481][ T57] bond6 (unregistering): Released all slaves [ 433.727250][ T57] bond7 (unregistering): Released all slaves [ 433.757955][ T57] bond8 (unregistering): Released all slaves [ 434.069976][T17061] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.109088][T17061] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.129659][T17264] ip6t_rpfilter: unknown options [ 434.161285][T17061] bridge_slave_0: entered allmulticast mode [ 434.188174][T17061] bridge_slave_0: entered promiscuous mode [ 434.207788][T17061] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.215915][T17061] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.233861][T17061] bridge_slave_1: entered allmulticast mode [ 434.244370][T17228] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 434.257573][T17061] bridge_slave_1: entered promiscuous mode [ 434.296639][ T57] tipc: Disabling bearer [ 434.343935][ T57] tipc: Left network mode [ 434.805490][T17278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3030'. [ 434.829538][T17280] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3027'. [ 435.235461][T17061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.723349][T17061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.107352][T17312] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3034'. [ 436.247898][T17061] team0: Port device team_slave_0 added [ 436.321819][T17061] team0: Port device team_slave_1 added [ 436.642350][T17325] openvswitch: netlink: Flow actions attr not present in new flow. [ 436.668127][T17325] netlink: 412 bytes leftover after parsing attributes in process `syz.4.3038'. [ 436.899414][T17061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.943775][T17061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.091188][T17061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.226723][T17333] netlink: 'syz.4.3040': attribute type 2 has an invalid length. [ 437.248228][T17333] netlink: 'syz.4.3040': attribute type 1 has an invalid length. [ 437.262144][T17061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.279025][T17061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.365011][T17061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.406047][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 437.880459][T17343] vlan0: left promiscuous mode [ 437.950041][T17343] team0 (unregistering): Port device vlan0 removed [ 438.396497][ T57] hsr_slave_0: left promiscuous mode [ 438.413885][ T57] hsr_slave_1: left promiscuous mode [ 438.488046][ T57] veth1_macvtap: left promiscuous mode [ 438.517459][ T57] veth1_vlan: left promiscuous mode [ 438.540831][ T57] veth0_vlan: left promiscuous mode [ 439.126905][ T57] team0 (unregistering): Port device team_slave_1 removed [ 439.172810][ T57] team0 (unregistering): Port device team_slave_0 removed [ 439.400177][T17061] hsr_slave_0: entered promiscuous mode [ 439.422848][T17061] hsr_slave_1: entered promiscuous mode [ 439.436704][T17061] debugfs: 'hsr0' already exists in 'hsr' [ 439.443350][T17061] Cannot create hsr debugfs directory [ 440.113958][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.767158][ T57] IPVS: stop unused estimator thread 0... [ 441.233355][T17401] netlink: 'syz.1.3053': attribute type 2 has an invalid length. [ 441.529000][T17410] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3055'. [ 441.617360][T17410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3055'. [ 443.685375][T17061] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 443.911298][T17061] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 443.972366][T17061] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 444.049634][T17061] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 444.086534][T17477] vlan0: Caught tx_queue_len zero misconfig [ 444.143884][T17061] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 444.197825][T17061] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 444.246009][T17061] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 444.359739][T17061] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 444.698147][T17505] netlink: 'syz.3.3072': attribute type 2 has an invalid length. [ 444.958032][T17510] netlink: 'syz.1.3073': attribute type 1 has an invalid length. [ 444.994258][T17061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.084630][T17061] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.096753][T17514] netlink: 'syz.2.3074': attribute type 5 has an invalid length. [ 445.244337][ T6924] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.251644][ T6924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.366312][T17522] xt_SECMARK: invalid mode: 9 [ 445.530570][ T203] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.537830][ T203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.776900][T17563] bridge0: port 3(vlan2) entered blocking state [ 446.813291][T17563] bridge0: port 3(vlan2) entered disabled state [ 446.847587][T17563] vlan2: entered allmulticast mode [ 446.887398][T17563] geneve0: entered allmulticast mode [ 446.929940][T17563] vlan2: entered promiscuous mode [ 446.967792][T17563] geneve0: entered promiscuous mode [ 447.367635][T17587] netlink: 'syz.1.3091': attribute type 21 has an invalid length. [ 447.377662][T17588] netlink: 'syz.3.3092': attribute type 24 has an invalid length. [ 447.409160][T17587] IPv6: NLM_F_CREATE should be specified when creating new route [ 448.054022][T17610] Bluetooth: MGMT ver 1.23 [ 448.540278][T17634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3098'. [ 448.737121][T17061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.864307][T17639] netlink: 'syz.1.3100': attribute type 21 has an invalid length. [ 448.901093][T17639] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3100'. [ 449.009651][T17643] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3101'. [ 449.078943][T17061] veth0_vlan: entered promiscuous mode [ 449.130627][T17061] veth1_vlan: entered promiscuous mode [ 449.168588][T17649] netlink: zone id is out of range [ 449.180429][T17650] syzkaller1: entered promiscuous mode [ 449.188579][T17650] syzkaller1: entered allmulticast mode [ 449.194453][T17649] netlink: zone id is out of range [ 449.234319][T17649] netlink: zone id is out of range [ 449.269222][T17649] netlink: zone id is out of range [ 449.292540][T17649] netlink: del zone limit has 4 unknown bytes [ 449.445738][T17061] veth0_macvtap: entered promiscuous mode [ 449.528652][T17061] veth1_macvtap: entered promiscuous mode [ 449.735594][T17061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.852969][T17061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.912046][ T6924] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.160792][ T6924] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.298798][ T6924] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.562091][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.625809][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.659817][T17701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3113'. [ 450.712231][ T6924] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.927483][ T6924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.987162][ T6924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.456387][T17718] netlink: 'syz.2.3116': attribute type 13 has an invalid length. [ 451.690440][T17727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2978'. [ 451.718845][T17727] netlink: 'syz.0.2978': attribute type 30 has an invalid length. [ 451.728191][T17727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2978'. [ 452.152845][ T5749] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 452.509635][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 452.523860][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 452.540441][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 452.558269][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 452.570237][ T5620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 453.016069][T17753] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3124'. [ 453.072927][ T29] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 453.453013][T17767] syzkaller0: entered promiscuous mode [ 453.481181][T17767] syzkaller0: entered allmulticast mode [ 453.646636][T17771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.828318][T16876] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.842108][T16876] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.076404][T17786] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3133'. [ 454.139440][T16876] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.184190][T16876] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.227124][T17791] xt_hashlimit: size too large, truncated to 1048576 [ 454.238607][T17792] team0: Device gtp0 is of different type [ 454.255117][T17791] xt_hashlimit: max too large, truncated to 1048576 [ 454.286691][T17791] xt_hashlimit: invalid rate [ 454.318780][T17791] xt_connbytes: Forcing CT accounting to be enabled [ 454.338538][T17791] xt_CT: You must specify a L4 protocol and not use inversions on it [ 454.387789][T16876] @: (slave netdevsim1): Releasing backup interface [ 454.430317][T16876] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.461788][T16876] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.681164][ T5627] Bluetooth: hci3: command tx timeout [ 454.703995][T17806] batadv0: entered promiscuous mode [ 454.715852][T17798] netlink: 'syz.2.3136': attribute type 4 has an invalid length. [ 454.727958][T17806] macsec1: entered promiscuous mode [ 454.735033][T17798] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3136'. [ 454.750251][T17806] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 454.763585][T17806] batadv0: left promiscuous mode [ 454.843172][T16876] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.854217][T16876] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.156299][T17820] netlink: 'syz.3.3142': attribute type 4 has an invalid length. [ 455.857190][T17844] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3147'. [ 455.870007][T17845] netlink: 'syz.3.3149': attribute type 1 has an invalid length. [ 455.877855][T17844] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3147'. [ 456.161919][T17861] netlink: 'syz.2.3152': attribute type 1 has an invalid length. [ 456.171379][T17863] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3149'. [ 456.297101][T17868] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3152'. [ 456.356573][T17869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3150'. [ 456.373392][T17851] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 456.402227][T16876] batadv1: left allmulticast mode [ 456.411626][T16876] batadv1: left promiscuous mode [ 456.417474][T16876] bridge0: port 1(batadv1) entered disabled state [ 456.443139][T16876] vlan2: left allmulticast mode [ 456.448840][T16876] geneve0: left allmulticast mode [ 456.471906][T16876] vlan2: left promiscuous mode [ 456.485084][T16876] geneve0: left promiscuous mode [ 456.494895][T16876] bridge0: port 3(vlan2) entered disabled state [ 456.516702][T16876] bridge_slave_1: left allmulticast mode [ 456.531835][T16876] bridge_slave_1: left promiscuous mode [ 456.549346][T16876] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.631333][T16876] pimreg: left allmulticast mode [ 456.647373][T16876] bond2: left allmulticast mode [ 456.661872][T16876] ip6gre1: left allmulticast mode [ 456.758135][ T5620] Bluetooth: hci3: command tx timeout [ 456.905955][T16876] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 456.916279][T16876] ip6gre1 (unregistering): left promiscuous mode [ 456.956234][T16876] bond6 (unregistering): (slave ip6gretap0): Releasing backup interface [ 456.965999][T16876] bond6 (unregistering): (slave ip6gretap0): the permanent HWaddr of slave - ce:57:b5:16:21:c4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 457.050714][T16876] bond10 (unregistering): (slave ip6erspan0): Releasing active interface [ 457.444224][T16876] bond12 (unregistering): (slave geneve3): Releasing active interface [ 457.529406][T16876] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 457.540357][T16876] bridge1 (unregistering): left promiscuous mode [ 457.574943][T16876] @ (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.593840][T16876] @ (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.607737][T16876] @ (unregistering): Released all slaves [ 457.622796][T16876] bond1 (unregistering): Released all slaves [ 457.643941][T16876] bond2 (unregistering): Released all slaves [ 457.664888][T16876] bond3 (unregistering): Released all slaves [ 457.696318][T16876] bond4 (unregistering): Released all slaves [ 457.718273][T16876] bond5 (unregistering): Released all slaves [ 457.748183][T16876] bond6 (unregistering): (slave veth5): Releasing backup interface [ 457.759437][T16876] bond6 (unregistering): Released all slaves [ 457.780364][T16876] bond7 (unregistering): Released all slaves [ 457.804170][T16876] bond8 (unregistering): Released all slaves [ 457.833449][T16876] bond9 (unregistering): Released all slaves [ 457.863682][T16876] bond10 (unregistering): Released all slaves [ 457.884208][T16876] bond11 (unregistering): Released all slaves [ 457.906074][T16876] bond12 (unregistering): Released all slaves [ 457.949844][T17854] veth3: entered promiscuous mode [ 457.965913][T17862] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.984348][T17861] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 457.986338][ T57] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 458.020345][T17863] 8021q: adding VLAN 0 to HW filter on device bond1 [ 458.177552][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 458.211435][ T6924] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 458.256679][T16876] tipc: Disabling bearer [ 458.268278][T16876] tipc: Left network mode [ 458.832911][ T5620] Bluetooth: hci3: command tx timeout [ 459.234104][T17911] netlink: 'syz.0.3158': attribute type 6 has an invalid length. [ 459.458792][T17742] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.505892][T17742] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.517151][T16876] IPVS: stopping master sync thread 12235 ... [ 459.552928][T17742] bridge_slave_0: entered allmulticast mode [ 459.604858][T17742] bridge_slave_0: entered promiscuous mode [ 459.728799][T17931] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3161'. [ 459.747061][T17742] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.785051][T17742] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.825824][T17742] bridge_slave_1: entered allmulticast mode [ 459.854974][T17742] bridge_slave_1: entered promiscuous mode [ 460.230149][T17929] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3162'. [ 460.298294][T17742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.339175][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 460.493732][T17742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.517300][T17948] raw_sendmsg: syz.2.3165 forgot to set AF_INET. Fix it! [ 460.911191][ T5620] Bluetooth: hci3: command tx timeout [ 460.924602][T17742] team0: Port device team_slave_0 added [ 461.060060][T17742] team0: Port device team_slave_1 added [ 461.286056][T17968] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3169'. [ 461.322052][T17742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.345857][T17742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.350317][T17972] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3170'. [ 461.430975][T17742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.534589][T17742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.579912][T17742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.716151][T17742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.743574][T17978] netlink: 'syz.3.3172': attribute type 1 has an invalid length. [ 461.804013][T17978] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3172'. [ 462.239814][T17990] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.395648][T17742] hsr_slave_0: entered promiscuous mode [ 462.438847][T17742] hsr_slave_1: entered promiscuous mode [ 462.465116][T17742] debugfs: 'hsr0' already exists in 'hsr' [ 462.485266][T17742] Cannot create hsr debugfs directory [ 462.529499][T18006] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 463.059812][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 463.387163][T16876] hsr_slave_0: left promiscuous mode [ 463.435673][T16876] hsr_slave_1: left promiscuous mode [ 463.452186][T16876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.494523][T16876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.527656][T16876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.551126][T16876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.628775][T16876] veth0_macvtap: left allmulticast mode [ 463.651062][T16876] veth0_macvtap: left promiscuous mode [ 463.868001][T18047] netlink: 'syz.0.3188': attribute type 1 has an invalid length. [ 464.001927][T18052] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3188'. [ 464.557267][T18053] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 464.819909][T18057] netlink: 'syz.3.3190': attribute type 1 has an invalid length. [ 465.010244][T18057] bond2: entered promiscuous mode [ 465.049156][T18057] 8021q: adding VLAN 0 to HW filter on device bond2 [ 465.955283][T18095] openvswitch: netlink: Message has 8 unknown bytes. [ 466.388175][T16876] IPVS: stop unused estimator thread 0... [ 467.476363][T18140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3210'. [ 467.561697][T17742] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 467.610431][T17742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 467.661034][T17742] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 467.730094][T17742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 467.766620][T17742] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 467.863349][T17742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 467.875304][T18152] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3212'. [ 467.932724][T17742] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 467.939315][T18154] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 467.987078][T17742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 468.352516][T18174] openvswitch: netlink: IPv4 tunnel dst address is zero [ 468.396790][T18174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.638749][T18184] xt_TCPMSS: Only works on TCP SYN packets [ 468.682955][T17742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.820930][T17742] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.923277][ T6924] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.931357][ T6924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.027681][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.035767][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.065695][T18195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3221'. [ 469.117539][T18195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3221'. [ 469.171671][T18197] netlink: 'syz.2.3222': attribute type 21 has an invalid length. [ 469.698126][T18217] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 470.048076][T18232] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3229'. [ 470.139885][T18237] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3231'. [ 470.163761][T18238] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 470.643878][T18258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3234'. [ 470.689643][T18258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3234'. [ 470.867400][T18265] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 471.021172][T18270] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3237'. [ 471.058359][T18270] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3237'. [ 471.285949][T18277] lo: Caught tx_queue_len zero misconfig [ 471.668997][T17742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.864033][T18297] netlink: 'syz.3.3243': attribute type 32 has an invalid length. [ 471.899477][T18300] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 472.346185][T18314] : renamed from dummy0 [ 472.773209][T18332] netlink: 'syz.0.3249': attribute type 1 has an invalid length. [ 472.967364][T18337] netlink: 'syz.2.3251': attribute type 5 has an invalid length. [ 472.999380][T18337] __nla_validate_parse: 10 callbacks suppressed [ 472.999401][T18337] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3251'. [ 473.235610][T17742] veth0_vlan: entered promiscuous mode [ 473.317072][T17742] veth1_vlan: entered promiscuous mode [ 473.410007][T18350] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3252'. [ 473.551182][T17742] veth0_macvtap: entered promiscuous mode [ 473.572314][T18360] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 473.629835][T17742] veth1_macvtap: entered promiscuous mode [ 473.786068][T17742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.906372][T18372] netlink: 'syz.1.3258': attribute type 3 has an invalid length. [ 473.944505][T18372] netlink: 'syz.1.3258': attribute type 12 has an invalid length. [ 473.988391][T18372] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3258'. [ 474.069747][T17742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.181296][ T58] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.230085][ T58] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.345130][T16875] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.492383][T16876] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.785938][T18389] v: renamed from veth0_vlan (while UP) [ 474.958910][T18400] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 475.038234][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.067639][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.246357][T16876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.256848][T16876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.277934][T18410] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3269'. [ 475.315848][T18410] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3269'. [ 475.374034][T18410] gretap0: entered promiscuous mode [ 475.455672][T18410] gretap0: left promiscuous mode [ 475.618539][T18417] netlink: 'syz.4.3119': attribute type 21 has an invalid length. [ 476.180850][T18436] netlink: 'syz.4.3274': attribute type 5 has an invalid length. [ 476.235615][T18436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3274'. [ 476.312480][T18436] ip_tables: iptables: counters copy to user failed while replacing table [ 476.599076][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 476.614106][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 476.626558][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 476.640484][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 476.654056][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 476.929083][T18458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3278'. [ 476.950644][T18455] bridge_slave_1: left allmulticast mode [ 476.974874][T18455] bridge_slave_1: left promiscuous mode [ 476.988771][T18458] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 476.996161][T18458] IPv6: NLM_F_CREATE should be set when creating new route [ 477.004754][T18455] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.026725][T18458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3278'. [ 477.125199][T18455] bridge_slave_0: left allmulticast mode [ 477.155661][T18455] bridge_slave_0: left promiscuous mode [ 477.199360][T18455] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.289283][T18466] netlink: 'syz.4.3277': attribute type 1 has an invalid length. [ 477.322230][T18466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3277'. [ 477.419864][T18468] netlink: 512 bytes leftover after parsing attributes in process `syz.3.3279'. [ 478.045287][T18494] netlink: 'syz.4.3284': attribute type 2 has an invalid length. [ 478.073812][T18494] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3284'. [ 478.346398][T18507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3286'. [ 478.648389][T16876] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.670639][ T5627] Bluetooth: hci4: command tx timeout [ 478.746122][T16876] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.943834][T18529] netlink: 'syz.4.3289': attribute type 1 has an invalid length. [ 479.015934][T18529] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3289'. [ 479.154238][T18529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3289'. [ 479.224950][T16876] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.278801][T16876] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.634261][T16876] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.665577][T16876] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.948127][T18546] syzkaller0: left promiscuous mode [ 479.973105][T18546] syzkaller0: left allmulticast mode [ 480.142861][T18567] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3299'. [ 480.496957][T18586] netlink: 6208 bytes leftover after parsing attributes in process `syz.1.3301'. [ 480.682841][T18584] x_tables: duplicate underflow at hook 2 [ 480.750765][ T5627] Bluetooth: hci4: command tx timeout [ 481.190332][T16876] pim6reg: left allmulticast mode [ 481.233698][T16876] pimreg3: left allmulticast mode [ 481.944993][T16876] bond5 (unregistering): (slave ip6erspan0): Releasing active interface [ 482.235718][T16876] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 482.551123][T16876] bond1 (unregistering): Released all slaves [ 482.604034][T16876] bond2 (unregistering): Released all slaves [ 482.656699][T16876] bond3 (unregistering): Released all slaves [ 482.718189][T16876] bond4 (unregistering): Released all slaves [ 482.767822][T16876] bond5 (unregistering): Released all slaves [ 482.804642][T16876] bond0 (unregistering): Released all slaves [ 482.836676][ T5627] Bluetooth: hci4: command tx timeout [ 482.862536][T16876] bond6 (unregistering): Released all slaves [ 483.417075][T18663] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3310'. [ 483.489086][T16876] IPVS: stopping master sync thread 13132 ... [ 483.588739][T18663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3310'. [ 483.629341][T18663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3310'. [ 483.779399][T18684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.912957][ T5627] Bluetooth: hci4: command tx timeout [ 485.104773][T18735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3322'. [ 485.447477][T18724] syzkaller1: entered promiscuous mode [ 485.484176][T18724] syzkaller1: entered allmulticast mode [ 485.719458][T18751] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3324'. [ 485.738113][T18751] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3324'. [ 485.750920][T18443] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.758428][T18443] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.776245][T18443] bridge_slave_0: entered allmulticast mode [ 485.807651][T18443] bridge_slave_0: entered promiscuous mode [ 485.870408][T18443] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.926548][T18443] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.947740][T18443] bridge_slave_1: entered allmulticast mode [ 485.988485][T18443] bridge_slave_1: entered promiscuous mode [ 486.107587][T16876] hsr_slave_0: left promiscuous mode [ 486.145388][T16876] hsr_slave_1: left promiscuous mode [ 486.175087][T16876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.208382][T16876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.238097][T16876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.262732][T16876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.288762][T18777] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 486.302994][T16876] veth0_macvtap: left promiscuous mode [ 486.319189][T16876] veth1_vlan: left promiscuous mode [ 486.340691][T16876] veth0_vlan: left promiscuous mode [ 487.466128][T18780] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3331'. [ 487.490724][T18780] veth0_to_bond: default FDB implementation only supports local addresses [ 487.723126][T18443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.774672][T18818] openvswitch: netlink: IP tunnel dst address not specified [ 487.815206][T18443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.107912][T18826] team0: Device gtp0 is up. Set it down before adding it as a team port [ 488.308374][T18443] team0: Port device team_slave_0 added [ 488.348544][T18443] team0: Port device team_slave_1 added [ 488.734771][T18845] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3340'. [ 488.763648][T18443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.809012][T18443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.923951][T18862] netlink: 'syz.4.3343': attribute type 1 has an invalid length. [ 488.936898][T18443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.208050][T18862] 8021q: adding VLAN 0 to HW filter on device bond1 [ 489.238814][T18443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.258740][T18443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.342425][T18443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.412907][T16876] IPVS: stop unused estimator thread 0... [ 489.524762][T18883] IPVS: length: 8 != 427519090240 [ 489.903147][T18443] hsr_slave_0: entered promiscuous mode [ 489.909961][T18897] netlink: 'syz.0.3347': attribute type 21 has an invalid length. [ 489.937063][T18443] hsr_slave_1: entered promiscuous mode [ 489.947051][T18897] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3347'. [ 490.003003][T18907] netlink: 'syz.0.3347': attribute type 21 has an invalid length. [ 490.035164][T18907] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3347'. [ 490.055601][T18897] netlink: 'syz.0.3347': attribute type 4 has an invalid length. [ 490.148607][T18897] netlink: 'syz.0.3347': attribute type 5 has an invalid length. [ 490.206930][T18897] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3347'. [ 490.258957][T18907] netlink: 'syz.0.3347': attribute type 4 has an invalid length. [ 490.273726][T18907] netlink: 'syz.0.3347': attribute type 5 has an invalid length. [ 490.304939][T18907] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3347'. [ 490.363882][T18914] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3350'. [ 490.986200][T18935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3355'. [ 491.537351][T18956] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 492.056229][T18975] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3365'. [ 492.198581][T18984] netlink: 'syz.3.3367': attribute type 21 has an invalid length. [ 492.716757][T18996] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3371'. [ 492.754364][T18996] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3371'. [ 492.764983][T18999] netlink: 'syz.0.3370': attribute type 5 has an invalid length. [ 493.292410][T19020] xt_hashlimit: size too large, truncated to 1048576 [ 493.384209][T18443] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 493.470064][T18443] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 493.536384][T18443] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 493.608333][T18443] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 493.777290][T18443] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 493.823555][T18443] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 493.857955][T18443] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 493.945420][T18443] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 494.426232][T18443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.479107][T19060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.537893][T18443] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.599919][T16876] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.607177][T16876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.656168][T16876] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.663431][T16876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.076430][ T5273] veth1_vlan: left promiscuous mode [ 495.226074][T19083] __nla_validate_parse: 4 callbacks suppressed [ 495.226092][T19083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3389'. [ 495.279680][T19086] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 495.760997][T19074] tunl0: entered promiscuous mode [ 495.790334][T19074] netlink: 'syz.1.3386': attribute type 3 has an invalid length. [ 495.838529][T19074] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3386'. [ 495.899334][T19107] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3393'. [ 496.008959][T19116] netlink: 'syz.4.3393': attribute type 49 has an invalid length. [ 496.356939][T19116] ip6gretap0: entered promiscuous mode [ 496.387933][T19116] ip6gretap0: entered allmulticast mode [ 496.824363][T19132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3397'. [ 496.881842][T19140] vlan3: entered allmulticast mode [ 496.914974][T19140] bond0: entered allmulticast mode [ 496.940215][T19140] bond_slave_0: entered allmulticast mode [ 496.961928][T19142] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3400'. [ 496.978287][T19140] bond_slave_1: entered allmulticast mode [ 497.168580][T19150] ipt_ECN: cannot use operation on non-tcp rule [ 497.464173][T19160] openvswitch: netlink: Key type 326 is out of range max 32 [ 497.514069][T18443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.528852][T19155] syzkaller0: entered promiscuous mode [ 497.536648][T19155] syzkaller0: entered allmulticast mode [ 497.592866][T19157] team0: Port device syz_tun added [ 497.821785][T19171] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3407'. [ 497.853360][T19171] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3407'. [ 497.958936][T19171] gretap1: entered promiscuous mode [ 497.977317][T19171] gretap1: entered allmulticast mode [ 498.015846][T19177] netlink: 538 bytes leftover after parsing attributes in process `syz.3.3409'. [ 498.039689][T18443] veth0_vlan: entered promiscuous mode [ 498.103581][T18443] veth1_vlan: entered promiscuous mode [ 498.300546][T18443] veth0_macvtap: entered promiscuous mode [ 498.336490][T19185] syzkaller0: entered promiscuous mode [ 498.358050][T19185] syzkaller0: entered allmulticast mode [ 498.378072][T18443] veth1_macvtap: entered promiscuous mode [ 498.456344][T18443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.526753][T18443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.566878][ T5627] block nbd2: Receive control failed (result -32) [ 498.675230][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.864982][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.961533][ T1067] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.209893][T19210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3417'. [ 499.249448][T19194] syzkaller0: entered promiscuous mode [ 499.256986][T19194] syzkaller0: entered allmulticast mode [ 499.295997][ T203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.311200][T16876] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.344504][ T203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.516332][T19214] bond2: entered promiscuous mode [ 499.531180][T19214] bond2: entered allmulticast mode [ 499.575832][ T203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.630443][ T203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.673390][T19231] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3418'. [ 501.552788][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.677460][ T6924] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.729615][ T6924] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.836702][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.900841][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.382669][T19289] netlink: 'syz.0.3432': attribute type 2 has an invalid length. [ 503.418549][T19289] __nla_validate_parse: 1 callbacks suppressed [ 503.418570][T19289] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3432'. [ 503.793419][ T987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.931300][ T5344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.115129][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 504.129435][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 504.143749][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 504.164999][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 504.177707][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 504.675288][T19327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3440'. [ 504.753401][ T987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.800332][T19327] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3440'. [ 504.830987][T19332] x_tables: duplicate underflow at hook 2 [ 504.869108][T19327] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3440'. [ 504.890221][T19334] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3443'. [ 505.034180][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.337840][T19351] block nbd3: not configured, cannot reconfigure [ 505.393040][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.556117][T19351] bond0: (slave bond_slave_1): Releasing backup interface [ 505.575442][T19358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3446'. [ 505.632813][T19351] bond_slave_1: left allmulticast mode [ 505.695819][T19362] netlink: 'syz.4.3447': attribute type 2 has an invalid length. [ 506.027930][T19369] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3449'. [ 506.153704][ T5344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.282731][ T5627] Bluetooth: hci0: command tx timeout [ 506.412486][T19376] team0: Device gtp0 is of different type [ 506.889649][T19402] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 506.935613][T19402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3460'. [ 506.961760][T19403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3460'. [ 506.988740][T19408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3460'. [ 507.234102][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.514642][T19429] Cannot find set identified by id 2 to match [ 507.539273][T19430] netlink: 'syz.0.3467': attribute type 1 has an invalid length. [ 507.616203][T19430] 8021q: adding VLAN 0 to HW filter on device bond2 [ 507.793530][ T987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.817023][T19430] vlan2: entered promiscuous mode [ 507.838431][T19430] bond2: entered promiscuous mode [ 507.867326][T19430] vlan2: entered allmulticast mode [ 507.882449][T19430] bond2: entered allmulticast mode [ 508.046892][T19449] openvswitch: netlink: Duplicate or invalid key (type 0). [ 508.352480][ T5627] Bluetooth: hci0: command tx timeout [ 508.398993][T19311] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.407205][T19311] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.428926][T19311] bridge_slave_0: entered allmulticast mode [ 508.444440][T19311] bridge_slave_0: entered promiscuous mode [ 508.467377][T19311] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.484442][T19311] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.501525][T19311] bridge_slave_1: entered allmulticast mode [ 508.514819][T19311] bridge_slave_1: entered promiscuous mode [ 508.740427][T19311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.763520][T19471] veth1_to_bond: entered allmulticast mode [ 508.770122][T19465] syzkaller1: entered promiscuous mode [ 508.777128][T19465] syzkaller1: entered allmulticast mode [ 508.778689][T19471] __nla_validate_parse: 8 callbacks suppressed [ 508.778752][T19471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3475'. [ 508.807634][T19473] netlink: 'syz.4.3476': attribute type 1 has an invalid length. [ 508.819821][T19473] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.3476'. [ 508.833823][T19311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.850819][T19473] netlink: 'syz.4.3476': attribute type 1 has an invalid length. [ 508.867647][T19473] netlink: 2016 bytes leftover after parsing attributes in process `syz.4.3476'. [ 509.022730][T19469] veth1_to_bond: left allmulticast mode [ 509.053615][T19311] team0: Port device team_slave_0 added [ 509.104169][T19311] team0: Port device team_slave_1 added [ 509.308222][T19311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.333071][T19311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.376786][ T9] net_ratelimit: 12 callbacks suppressed [ 509.376913][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.420633][T19311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.435350][T19311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.443053][T19311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.469571][T19311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.580416][T19496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.617468][T19496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.644973][T19496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.689228][T19499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.737122][T19499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.788754][T19505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3481'. [ 509.798069][T19507] IPv6: NLM_F_REPLACE set, but no existing node found! [ 509.814392][T19499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.836544][T19505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3481'. [ 509.854898][T19311] hsr_slave_0: entered promiscuous mode [ 509.870151][T19499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.880219][T19311] hsr_slave_1: entered promiscuous mode [ 509.886976][T19311] debugfs: 'hsr0' already exists in 'hsr' [ 509.887001][T19311] Cannot create hsr debugfs directory [ 509.916814][T19507] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 509.934994][T19508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.989831][T19508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.433112][ T5627] Bluetooth: hci0: command tx timeout [ 510.524002][T19531] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 510.563170][T19531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3491'. [ 511.019080][T19311] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.044879][T19311] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.268067][T19311] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.309401][T19311] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.390924][T19567] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3500'. [ 511.439823][T19566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3501'. [ 511.531606][T19311] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.543655][T19311] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.573882][T19568] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3502'. [ 511.583770][T19575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3503'. [ 511.994673][T19311] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.024759][T19311] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.318519][T19599] tc_dump_action: action bad kind [ 512.522080][ T5627] Bluetooth: hci0: command tx timeout [ 512.941449][T19311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 512.988604][T19311] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 513.026022][T19311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 513.070305][T19311] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 513.141064][T19622] netlink: 'syz.3.3520': attribute type 62 has an invalid length. [ 513.174688][T19311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 513.221149][T19311] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 513.291857][T19311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 513.338441][T19311] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 513.583464][T19645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.606805][T19649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.784118][T19652] nftables ruleset with unbound set [ 513.887345][T19657] Bluetooth: MGMT ver 1.23 [ 513.922741][T19655] tipc: Started in network mode [ 513.928579][T19655] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 513.943530][T19655] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 513.965385][T19655] tipc: Enabled bearer , priority 10 [ 514.005349][T19311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.169188][T19311] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.224179][T16876] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.231447][T16876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.339194][T13159] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.346573][T13159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.364353][T19667] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 514.372474][T19667] IPv6: NLM_F_CREATE should be set when creating new route [ 514.399041][T19669] __nla_validate_parse: 2 callbacks suppressed [ 514.399059][T19669] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3534'. [ 514.537657][T19676] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3534'. [ 514.674014][T17690] net_ratelimit: 54 callbacks suppressed [ 514.674037][T17690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.994255][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.049010][T19692] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3536'. [ 515.065606][ T10] tipc: Node number set to 1 [ 515.654583][T19709] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3541'. [ 515.743614][T17690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.766662][T19709] vlan3: entered allmulticast mode [ 515.791698][T19709] bond0: entered allmulticast mode [ 515.817051][T19709] bond_slave_0: entered allmulticast mode [ 515.827256][T19709] bond_slave_1: entered allmulticast mode [ 515.941578][T19717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.950630][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.029034][T19717] sctp: [Deprecated]: syz.4.3544 (pid 19717) Use of struct sctp_assoc_value in delayed_ack socket option. [ 516.029034][T19717] Use struct sctp_sack_info instead [ 516.172941][ T5749] IPVS: starting estimator thread 0... [ 516.280693][T19725] IPVS: using max 27 ests per chain, 64800 per kthread [ 516.648763][T19738] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3549'. [ 516.822224][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.068268][T19739] syzkaller0: entered promiscuous mode [ 517.094075][T19739] syzkaller0: entered allmulticast mode [ 517.152661][T19739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3550'. [ 517.517534][T19760] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3554'. [ 517.570071][T19760] IPv6: NLM_F_CREATE should be specified when creating new route [ 517.603430][T19760] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.611689][T19760] IPv6: NLM_F_CREATE should be set when creating new route [ 517.621417][T19760] IPv6: NLM_F_CREATE should be set when creating new route [ 517.828516][T19767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3557'. [ 517.893183][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.031023][ T987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.942918][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.983080][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.194227][T19311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.215790][T19773] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3558'. [ 520.257345][T19773] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 520.342303][T19779] dvmrp1: entered allmulticast mode [ 520.476728][T19782] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3561'. [ 520.542654][T19311] veth0_vlan: entered promiscuous mode [ 520.606739][T19311] veth1_vlan: entered promiscuous mode [ 520.807933][T19790] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3563'. [ 520.855906][T19790] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3563'. [ 520.885310][T19311] veth0_macvtap: entered promiscuous mode [ 520.915057][T19311] veth1_macvtap: entered promiscuous mode [ 521.009171][T19311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.027446][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.071335][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.115930][T19311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.138097][T19797] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3565'. [ 521.204219][T16876] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.262974][T16876] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.367360][T13159] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.404657][T13159] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.549699][T19816] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3569'. [ 521.604727][T19816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3569'. [ 521.768225][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.800341][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.917118][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.949443][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.007965][T19825] netlink: 'syz.3.3571': attribute type 12 has an invalid length. [ 522.033920][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.060929][T19825] netlink: 'syz.3.3571': attribute type 29 has an invalid length. [ 522.089639][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.155211][T19825] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3571'. [ 522.186950][T19825] netlink: 59 bytes leftover after parsing attributes in process `syz.3.3571'. [ 522.237459][T19823] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 522.598870][T19838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3429'. [ 523.150462][T19857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.187562][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.300257][T19857] bond2: entered allmulticast mode [ 523.502065][T19867] sctp: [Deprecated]: syz.1.3578 (pid 19867) Use of struct sctp_assoc_value in delayed_ack socket option. [ 523.502065][T19867] Use struct sctp_sack_info instead [ 524.020997][T19896] unsupported nla_type 216 [ 524.114129][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.538457][T19911] netlink: 'syz.0.3589': attribute type 25 has an invalid length. [ 525.083624][T19934] net_ratelimit: 2 callbacks suppressed [ 525.083666][T19934] ip_tables: iptables: counters copy to user failed while replacing table [ 525.226161][T19948] netlink: 'syz.3.3599': attribute type 4 has an invalid length. [ 525.253380][T19947] netlink: 'syz.3.3599': attribute type 4 has an invalid length. [ 525.284089][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.320286][T19953] netlink: 'syz.3.3599': attribute type 4 has an invalid length. [ 525.363872][T19951] __nla_validate_parse: 5 callbacks suppressed [ 525.363929][T19951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3600'. [ 526.418799][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.651073][T19999] bond3: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 526.742353][T19999] bond3 (unregistering): Released all slaves [ 526.879780][T20024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3617'. [ 527.167665][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.394862][T20039] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 527.403282][T20032] bridge_slave_0: left allmulticast mode [ 527.423352][T20032] bridge_slave_0: left promiscuous mode [ 527.436714][T20032] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.463271][T20032] bridge_slave_1: left allmulticast mode [ 527.486922][ T5344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.499906][T20032] bridge_slave_1: left promiscuous mode [ 527.510835][T20032] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.537537][T20032] bond0: (slave bond_slave_0): Releasing backup interface [ 527.550417][T20049] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3621'. [ 527.566575][T20032] bond0: (slave bond_slave_1): Releasing backup interface [ 527.594074][T20032] team0: Port device team_slave_0 removed [ 527.624410][T20032] team0: Port device team_slave_1 removed [ 527.636874][T20032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.646655][T20032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.664912][T20032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.677395][T20032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.687703][T20050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3619'. [ 527.710186][T20032] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 527.782870][T20043] vlan0: entered promiscuous mode [ 527.809365][T20043] team0: Port device vlan0 added [ 527.815750][T20046] tipc: Started in network mode [ 527.822581][T20046] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 527.830015][T20046] tipc: Enabled bearer , priority 0 [ 527.886421][T20055] bond3: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 527.903268][T20055] bond3 (unregistering): Released all slaves [ 528.185557][T20067] Cannot find add_set index 34 as target [ 528.208912][T20064] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3626'. [ 528.580978][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.842780][ T9] tipc: Node number set to 11578026 [ 528.874386][T20090] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3632'. [ 528.898506][T20090] netlink: 'syz.1.3632': attribute type 1 has an invalid length. [ 528.979149][T20093] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3632'. [ 529.233455][ T5620] Bluetooth: hci5: command 0x0405 tx timeout [ 529.392791][T20107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3633'. [ 529.643358][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.898114][T20129] sctp: [Deprecated]: syz.3.3640 (pid 20129) Use of int in max_burst socket option deprecated. [ 529.898114][T20129] Use struct sctp_assoc_value instead [ 530.191876][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.656780][T20160] Cannot find set identified by id 0 to match [ 530.705917][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.723553][T20152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3648'. [ 530.744268][ T6924] bond1: (slave ip6gretap1): link status up again after 0 ms [ 530.757741][T20164] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3650'. [ 530.769032][T20164] netlink: 'syz.1.3650': attribute type 3 has an invalid length. [ 530.779841][T20164] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3650'. [ 530.790613][T20164] netlink: 'syz.1.3650': attribute type 3 has an invalid length. [ 530.811566][ T6924] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 530.876158][T20166] veth1_to_bond: entered allmulticast mode [ 530.916957][T20166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3652'. [ 530.950976][T16876] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 531.071237][ T6924] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 531.095639][T20165] veth1_to_bond: left allmulticast mode [ 531.160077][T20174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3654'. [ 531.200908][ T6924] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 531.213390][T20174] netlink: 'syz.4.3654': attribute type 16 has an invalid length. [ 531.332245][T16876] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 531.425035][T20181] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3657'. [ 531.470672][T16876] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 531.605110][T20185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.104083][T20199] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3663'. [ 532.838827][T20237] netlink: 'syz.2.3675': attribute type 32 has an invalid length. [ 532.899000][T20237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3675'. [ 532.941344][T20237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3675'. [ 533.014065][T20237] erspan0: entered promiscuous mode [ 533.049446][T20237] gretap0: entered promiscuous mode [ 533.062978][T20237] debugfs: 'hsr1' already exists in 'hsr' [ 533.087419][T20237] Cannot create hsr debugfs directory [ 533.306879][T20289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3677'. [ 533.424532][T20303] netlink: 'syz.0.3676': attribute type 10 has an invalid length. [ 533.842879][T20303] veth0_to_bond: entered allmulticast mode [ 533.961314][T20314] netlink: 'syz.3.3680': attribute type 1 has an invalid length. [ 533.989488][T20304] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.996799][T20304] bridge0: port 2(bridge_slave_1) entered listening state [ 534.004407][T20304] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.011674][T20304] bridge0: port 1(bridge_slave_0) entered listening state [ 534.459370][T20322] bridge0: entered promiscuous mode [ 534.478176][T20322] bridge0: entered allmulticast mode [ 534.558010][T20325] netlink: 'syz.0.3683': attribute type 1 has an invalid length. [ 535.280948][T19353] net_ratelimit: 117 callbacks suppressed [ 535.280968][T19353] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 535.437824][T20355] ip6t_rpfilter: unknown options [ 535.474474][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.483871][T20275] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 535.490244][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.616790][T20363] netlink: 'syz.3.3696': attribute type 1 has an invalid length. [ 535.651144][T20275] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 535.733951][T20366] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 535.817091][T20363] 8021q: adding VLAN 0 to HW filter on device bond3 [ 536.010788][T20275] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 536.027081][T20381] __nla_validate_parse: 3 callbacks suppressed [ 536.027131][T20381] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3701'. [ 536.047307][ T5344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.141069][T20284] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 536.262294][T20281] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 536.671933][T20367] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3700'. [ 536.693069][T20401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3707'. [ 536.881673][T20409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3710'. [ 536.905375][T20409] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3710'. [ 536.918834][T20409] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3710'. [ 537.222859][T20421] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3714'. [ 537.236318][T20422] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3713'. [ 537.263103][T20422] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3713'. [ 537.291532][T20421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3714'. [ 537.904048][T20443] netlink: 'syz.3.3721': attribute type 1 has an invalid length. [ 538.265270][T20471] bridge0: port 1(veth0) entered blocking state [ 538.304642][T20471] bridge0: port 1(veth0) entered disabled state [ 538.314910][T20471] veth0: entered allmulticast mode [ 538.325536][T20471] veth0: entered promiscuous mode [ 538.332073][T20471] bridge0: port 1(veth0) entered blocking state [ 538.338621][T20471] bridge0: port 1(veth0) entered listening state [ 538.372424][ T5627] block nbd3: Receive control failed (result -32) [ 538.485730][T20477] team0: Device ipvlan0 failed to register rx_handler [ 538.688290][T20482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.711447][T20484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.324451][ T5740] IPVS: starting estimator thread 0... [ 539.437251][T20503] IPVS: using max 25 ests per chain, 60000 per kthread [ 539.718885][T20512] tipc: Enabled bearer , priority 1 [ 539.772473][T20511] tipc: Resetting bearer [ 539.824455][T20511] tipc: Disabling bearer [ 540.092964][T20526] netlink: 'syz.0.3746': attribute type 1 has an invalid length. [ 540.350606][ C1] bridge0: port 1(veth0) entered learning state [ 540.412946][T20269] net_ratelimit: 52 callbacks suppressed [ 540.413003][T20269] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 540.531043][T20278] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 540.683365][T20275] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 540.825730][T20549] ip6gre1: entered promiscuous mode [ 540.869174][T20549] ip6gre1: entered allmulticast mode [ 540.915431][T20554] netlink: 'syz.3.3754': attribute type 10 has an invalid length. [ 540.950333][T20554] geneve2: entered promiscuous mode [ 540.958137][T20554] geneve2: entered allmulticast mode [ 541.003036][T20281] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 541.144866][T19353] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 541.232459][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.281077][T20281] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 541.404561][T20568] __nla_validate_parse: 10 callbacks suppressed [ 541.404583][T20568] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3759'. [ 541.435204][T20275] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 541.471874][T20573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3761'. [ 541.560733][T20275] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 541.680636][T20275] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 541.976239][T20592] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3767'. [ 542.433250][ C1] bridge0: port 1(veth0) entered forwarding state [ 542.439869][ C1] bridge0: topology change detected, propagating [ 542.594070][T20616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3773'. [ 543.257421][T20645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3782'. [ 543.273104][T20643] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3781'. [ 543.288232][T20646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3782'. [ 543.326071][T20645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3782'. [ 543.364448][T20646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3782'. [ 543.394125][T20645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3782'. [ 543.667063][T20655] netlink: 'syz.4.3784': attribute type 11 has an invalid length. [ 543.697593][T20655] netlink: 'syz.4.3784': attribute type 4 has an invalid length. [ 543.909014][T20665] syzkaller0: entered promiscuous mode [ 543.923238][T20665] syzkaller0: entered allmulticast mode [ 544.617833][T20702] vlan2: entered promiscuous mode [ 544.632944][T20702] geneve1: entered promiscuous mode [ 544.650157][T20702] vlan2: entered allmulticast mode [ 544.666455][T20702] geneve1: entered allmulticast mode [ 544.843565][T20710] syzkaller0: entered promiscuous mode [ 544.866583][T20710] syzkaller0: entered allmulticast mode [ 544.968906][T20679] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 545.062297][T20719] sctp: [Deprecated]: syz.2.3805 (pid 20719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 545.062297][T20719] Use struct sctp_sack_info instead [ 545.357326][T20724] syzkaller0: create flow: hash 3189884242 index 0 [ 545.532866][T20275] syzkaller0: tun_net_xmit 76 [ 545.538335][T20275] syzkaller0: tun_net_xmit 48 [ 546.442096][ T5808] net_ratelimit: 47 callbacks suppressed [ 546.442121][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.209681][T20761] __nla_validate_parse: 4 callbacks suppressed [ 547.209699][T20761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3813'. [ 547.472910][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.197881][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.432338][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.529389][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.642516][T20723] syzkaller0 (unregistered): delete flow: hash 3189884242 index 0 [ 548.651049][T20246] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 548.812482][T20246] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 548.836451][T20765] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3815'. [ 548.926124][T20770] team0: No ports can be present during mode change [ 548.960952][T20284] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 549.091060][T20284] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 549.209095][T20782] veth1_to_bond: entered promiscuous mode [ 549.240746][T20275] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 549.364064][T20791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3819'. [ 549.413849][T20791] veth1_to_bond (unregistering): left promiscuous mode [ 549.595703][T20806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3825'. [ 549.619106][T20804] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 549.644284][T20806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3825'. [ 549.710910][ T5620] Bluetooth: hci1: command 0x0406 tx timeout [ 549.914536][T20811] netlink: 'syz.2.3828': attribute type 3 has an invalid length. [ 550.232494][T20826] netlink: 'syz.4.3832': attribute type 14 has an invalid length. [ 550.262988][T20826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3832'. [ 550.278586][T20828] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3831'. [ 550.359320][T20826] netlink: 'syz.4.3832': attribute type 14 has an invalid length. [ 550.371184][T20246] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.416953][T20826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3832'. [ 550.492340][T20284] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.612998][T20288] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.642473][T20288] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.829324][T20847] netlink: 'syz.4.3836': attribute type 10 has an invalid length. [ 550.868676][T20841] No such timeout policy "syz0" [ 550.907508][T20847] team0: Port device dummy0 added [ 551.109242][T20858] syz.1.3840: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 551.126196][T20858] CPU: 1 UID: 0 PID: 20858 Comm: syz.1.3840 Not tainted syzkaller #0 PREEMPT(full) [ 551.126223][T20858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 551.126244][T20858] Call Trace: [ 551.126323][T20858] [ 551.126389][T20858] dump_stack_lvl+0xe8/0x150 [ 551.126517][T20858] warn_alloc+0x24c/0x270 [ 551.126576][T20858] ? stack_depot_save_flags+0x33/0x800 [ 551.126679][T20858] ? __pfx_warn_alloc+0x10/0x10 [ 551.126707][T20858] ? kasan_save_track+0x3e/0x80 [ 551.126742][T20858] ? __kasan_kmalloc+0x93/0xb0 [ 551.126771][T20858] ? xsk_setsockopt+0x52a/0x960 [ 551.126849][T20858] ? do_sock_setsockopt+0x17c/0x1b0 [ 551.126930][T20858] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 551.126953][T20858] ? do_syscall_64+0x174/0x580 [ 551.127028][T20858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.127113][T20858] __vmalloc_node_range_noprof+0x12c/0x1730 [ 551.127171][T20858] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 551.127200][T20858] ? __kasan_kmalloc+0x93/0xb0 [ 551.127228][T20858] ? __kmalloc_cache_noprof+0x32d/0x660 [ 551.127254][T20858] ? __kmalloc_cache_noprof+0x150/0x660 [ 551.127283][T20858] vmalloc_user_noprof+0xad/0xe0 [ 551.127308][T20858] ? xskq_create+0xbf/0x170 [ 551.127332][T20858] xskq_create+0xbf/0x170 [ 551.127357][T20858] xsk_init_queue+0x8a/0xe0 [ 551.127380][T20858] xsk_setsockopt+0x52a/0x960 [ 551.127400][T20858] ? __fget_files+0x2a/0x420 [ 551.127447][T20858] ? __pfx_xsk_setsockopt+0x10/0x10 [ 551.127468][T20858] ? __pfx_aa_sk_perm+0x10/0x10 [ 551.127553][T20858] ? aa_sock_opt_perm+0xff/0x1a0 [ 551.127584][T20858] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 551.127641][T20858] ? __pfx_xsk_setsockopt+0x10/0x10 [ 551.127663][T20858] do_sock_setsockopt+0x17c/0x1b0 [ 551.127690][T20858] __x64_sys_setsockopt+0x13d/0x1b0 [ 551.127715][T20858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.127738][T20858] do_syscall_64+0x174/0x580 [ 551.127761][T20858] ? trace_irq_disable+0x3b/0x140 [ 551.127798][T20858] ? clear_bhb_loop+0x70/0xc0 [ 551.127825][T20858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.127846][T20858] RIP: 0033:0x7ff48fd9e0d9 [ 551.127879][T20858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.127898][T20858] RSP: 002b:00007ff490c82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 551.127927][T20858] RAX: ffffffffffffffda RBX: 00007ff490025fa0 RCX: 00007ff48fd9e0d9 [ 551.127943][T20858] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 551.127955][T20858] RBP: 00007ff48fe35024 R08: 0000000000000004 R09: 0000000000000000 [ 551.127968][T20858] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.127982][T20858] R13: 00007ff490026038 R14: 00007ff490025fa0 R15: 00007ffd926cb908 [ 551.128015][T20858] [ 551.128156][T20858] Mem-Info: [ 551.467605][T20867] netlink: 'syz.2.3841': attribute type 1 has an invalid length. [ 551.476231][T20858] active_anon:6047 inactive_anon:0 isolated_anon:0 [ 551.476231][T20858] active_file:2 inactive_file:43260 isolated_file:0 [ 551.476231][T20858] unevictable:0 dirty:65 writeback:0 [ 551.476231][T20858] slab_reclaimable:11138 slab_unreclaimable:107795 [ 551.476231][T20858] mapped:30484 shmem:572 pagetables:3611 [ 551.476231][T20858] sec_pagetables:0 bounce:0 [ 551.476231][T20858] kernel_misc_reclaimable:0 [ 551.476231][T20858] free:1309764 free_pcp:8882 free_cma:0 [ 551.561346][T20858] Node 0 active_anon:24188kB inactive_anon:0kB active_file:8kB inactive_file:172832kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121936kB dirty:260kB writeback:0kB shmem:2188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15616kB pagetables:14324kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 551.599320][T20867] 8021q: adding VLAN 0 to HW filter on device bond1 [ 551.605846][T20858] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 551.605977][T20858] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 551.606041][T20858] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 551.606089][T20858] Node 0 DMA32 free:1281192kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24088kB inactive_anon:0kB active_file:8kB inactive_file:172832kB unevictable:0kB writepending:260kB zspages:0kB present:3129332kB managed:2548488kB mlocked:0kB bounce:0kB free_pcp:36108kB local_pcp:20632kB free_cma:0kB [ 551.606153][T20858] lowmem_reserve[]: 0 0 0 0 0 [ 551.606198][T20858] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:256kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 551.606257][T20858] lowmem_reserve[]: 0 0 0 0 0 [ 551.761163][ T9] net_ratelimit: 16 callbacks suppressed [ 551.761186][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.784300][T20858] [ 551.786789][T20858] Node 1 Normal free:3942504kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 551.829815][T20858] lowmem_reserve[]: 0 0 0 0 0 [ 551.835148][T20858] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 551.850908][T20858] Node 0 DMA32: 1804*4kB (UM) 1109*8kB (UME) 839*16kB (UME) 385*32kB (UME) 589*64kB (UME) 508*128kB (UM) 406*256kB (UME) 243*512kB (UME) 145*1024kB (UM) 7*2048kB (UE) 182*4096kB (UM) = 1281192kB [ 551.878620][T20858] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 551.892094][T20858] Node 1 Normal: 2*4kB (UM) 6*8kB (UM) 9*16kB (UM) 5*32kB (UM) 4*64kB (UM) 4*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (UM) = 3942504kB [ 551.931492][T19353] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 551.960889][T20858] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 551.971666][T20858] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 551.982893][T20858] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 552.009713][T20858] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 552.062531][T20269] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 552.082838][T20858] 43781 total pagecache pages [ 552.110877][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.123035][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.143993][T20858] 0 pages in swap cache [ 552.154708][T20858] Free swap = 124996kB [ 552.173465][T20858] Total swap = 124996kB [ 552.189937][T20858] 2097051 pages RAM [ 552.199700][T20858] 0 pages HighMem/MovableOnly [ 552.227669][T20858] 428250 pages reserved [ 552.248229][T20858] 0 pages cma reserved [ 552.302669][T20284] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 552.492993][T19353] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 552.591401][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.755203][T20281] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 552.763212][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.023203][T20903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3851'. [ 553.071943][T20903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3851'. [ 553.428264][T20919] sock: sock_timestamping_bind_phc: sock not bind to device [ 553.441776][T20920] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3857'. [ 553.709042][T20933] syzkaller1: entered promiscuous mode [ 553.738701][T20933] syzkaller1: entered allmulticast mode [ 553.752116][T20935] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3863'. [ 553.865538][T20928] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3860'. [ 554.080028][T20932] bond2: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 554.124869][T20932] bond2 (unregistering): Released all slaves [ 554.258092][T20955] netlink: 'syz.3.3867': attribute type 1 has an invalid length. [ 554.426049][T20955] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 554.689646][T20973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3871'. [ 554.810644][T20981] xt_ipcomp: unknown flags 1D [ 554.903556][T20979] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 555.140929][T20994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3875'. [ 555.613500][T21007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.650171][T21008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3882'. [ 555.674143][T21007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3881'. [ 555.716414][T21013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3884'. [ 555.899176][T21015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.985551][T21015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.036768][T21015] bond0 (unregistering): Released all slaves [ 556.118942][T21028] macsec1: entered promiscuous mode [ 556.132417][T21028] bridge0: entered promiscuous mode [ 556.150973][T21028] macsec1: entered allmulticast mode [ 556.179375][T21028] bridge0: entered allmulticast mode [ 556.188430][T21028] bridge0: port 1(macsec1) entered blocking state [ 556.201471][T21028] bridge0: port 1(macsec1) entered disabled state [ 556.268903][T21028] bridge0: left allmulticast mode [ 556.390213][ T5749] bridge0: left promiscuous mode [ 556.545010][T21030] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 556.805014][T20275] net_ratelimit: 40 callbacks suppressed [ 556.805035][T20275] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 556.900955][T21049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.938300][T21051] xt_ecn: cannot match TCP bits for non-tcp packets [ 556.959239][T21048] netlink: zone id is out of range [ 556.980873][T21048] netlink: zone id is out of range [ 556.991815][ T5344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.992522][T19353] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 557.010413][T21048] netlink: zone id is out of range [ 557.029165][T21048] netlink: zone id is out of range [ 557.048022][T21048] netlink: zone id is out of range [ 557.062570][T21048] netlink: zone id is out of range [ 557.153538][T21053] team0: Device gtp0 is of different type [ 557.207014][T21055] xt_hashlimit: size too large, truncated to 1048576 [ 557.944650][T21083] netlink: 'syz.0.3905': attribute type 21 has an invalid length. [ 558.223993][T21097] __nla_validate_parse: 14 callbacks suppressed [ 558.224014][T21097] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3909'. [ 558.275754][T21103] netlink: 'syz.2.3909': attribute type 2 has an invalid length. [ 558.363420][T21103] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 558.912023][T21124] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3915'. [ 558.939211][T21125] bridge0: port 3(veth0) entered blocking state [ 558.955392][T21125] bridge0: port 3(veth0) entered disabled state [ 558.975642][T21125] veth0: entered allmulticast mode [ 559.007668][T21125] veth0: entered promiscuous mode [ 559.028752][T21125] bridge0: port 3(veth0) entered blocking state [ 559.037811][T21125] bridge0: port 3(veth0) entered listening state [ 561.900697][T20284] net_ratelimit: 115 callbacks suppressed [ 561.900722][T20284] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 562.020722][T20284] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 562.119067][T21134] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 562.133619][T20281] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 562.212933][ T5344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.292633][T20281] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 562.417809][T21172] netlink: 'syz.4.3926': attribute type 1 has an invalid length. [ 562.443251][T20284] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 562.461973][T21172] netlink: 756 bytes leftover after parsing attributes in process `syz.4.3926'. [ 562.581131][T20281] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 562.666225][T21181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3931'. [ 562.696668][T21181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3931'. [ 562.709623][T20284] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 562.732419][T21181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3931'. [ 562.893011][T20284] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 563.011836][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.020955][T21201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3936'. [ 563.165656][T21198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3936'. [ 563.243142][ T5344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.371248][T21217] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3941'. [ 563.486983][T21227] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3942'. [ 563.828802][T21251] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3944'. [ 564.272253][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 564.279628][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 566.375715][T21226] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 566.693215][T21264] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3949'. [ 566.712162][T21262] netlink: 'syz.2.3951': attribute type 1 has an invalid length. [ 567.083717][T21262] 8021q: adding VLAN 0 to HW filter on device bond3 [ 567.142038][T20281] net_ratelimit: 35 callbacks suppressed [ 567.142058][T20281] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 567.188561][T21284] netlink: 'syz.0.3956': attribute type 1 has an invalid length. [ 567.264139][T21284] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3956'. [ 567.391032][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.437136][T21295] xt_hashlimit: size too large, truncated to 1048576 [ 567.498964][T21289] bridge0: port 2(syz_tun) entered blocking state [ 567.509060][T21289] bridge0: port 2(syz_tun) entered disabled state [ 567.518840][T21289] syz_tun: entered allmulticast mode [ 567.579759][T21289] syz_tun: entered promiscuous mode [ 567.638625][T21289] bridge0: port 2(syz_tun) entered blocking state [ 567.648476][T21289] bridge0: port 2(syz_tun) entered listening state [ 567.798013][T20288] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 568.001557][T20278] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 568.125733][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.137161][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.150868][T20278] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 568.290797][T20246] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 568.423914][T20246] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 568.444348][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.977845][T21343] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3974'. [ 569.081538][T21348] netlink: 'syz.4.3976': attribute type 13 has an invalid length. [ 569.324969][T21361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3977'. [ 569.476355][T21354] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3978'. [ 569.520780][T21362] vxcan1: entered promiscuous mode [ 569.710707][ C0] bridge0: port 2(syz_tun) entered learning state [ 569.853881][T21380] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 569.933209][T21382] netlink: 'syz.0.3988': attribute type 2 has an invalid length. [ 569.967015][T21382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3988'. [ 570.243055][T21399] nbd: must specify at least one socket [ 570.249001][T21390] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 570.261574][T21390] bond1 (unregistering): Released all slaves [ 570.298498][T21392] netlink: 45 bytes leftover after parsing attributes in process `syz.0.3990'. [ 570.334514][T21392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3990'. [ 570.869674][T21421] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3997'. [ 570.947038][T21422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3999'. [ 570.981663][T21418] netlink: 380 bytes leftover after parsing attributes in process `syz.3.4000'. [ 571.013974][T21418] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 571.800675][ C0] bridge0: port 2(syz_tun) entered forwarding state [ 571.808065][ C0] bridge0: topology change detected, propagating [ 571.903007][T21464] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4010'. [ 572.299738][T21473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.345833][T21481] vlan3: entered promiscuous mode [ 572.445235][T20246] net_ratelimit: 36 callbacks suppressed [ 572.445255][T20246] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 572.610734][T20246] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 572.671011][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.964953][T21498] bond4: entered promiscuous mode [ 573.009693][T21498] bond4: entered allmulticast mode [ 573.051095][T20269] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 573.105700][T21508] netlink: 'syz.0.4024': attribute type 1 has an invalid length. [ 573.141068][T21508] netlink: 'syz.0.4024': attribute type 1 has an invalid length. [ 573.171083][T19353] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 573.303426][T19353] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 573.441674][T20284] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 573.580984][T19353] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 573.703994][T21528] tipc: Started in network mode [ 573.711879][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.729803][T21528] tipc: Node identity 812, cluster identity 4711 [ 573.749161][T21528] tipc: Node number set to 2066 [ 573.821509][T20278] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 574.274234][T21548] __nla_validate_parse: 7 callbacks suppressed [ 574.274733][T21548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4035'. [ 574.778606][T21558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4037'. [ 574.876945][T21558] 8021q: adding VLAN 0 to HW filter on device bond4 [ 574.887829][T21559] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.220139][T21572] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 575.311388][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 575.404136][T21580] netlink: 'syz.1.4045': attribute type 1 has an invalid length. [ 575.412796][T21580] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4045'. [ 575.916750][T21597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4047'. [ 576.316767][T21616] veth0: Caught tx_queue_len zero misconfig [ 576.329949][T21617] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4053'. [ 576.579587][T21628] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4057'. [ 576.599103][T21631] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4057'. [ 576.641519][T21632] tipc: Enabling of bearer rejected, failed to enable media [ 577.107958][T21636] syzkaller0: Caught tx_queue_len zero misconfig [ 577.289532][T21651] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4063'. [ 577.491627][T20278] net_ratelimit: 32 callbacks suppressed [ 577.491648][T20278] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 577.545483][T21660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.555227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.673217][T20278] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 577.695625][T21667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4070'. [ 577.761768][T21669] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4070'. [ 577.832298][T20284] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 577.871131][ T5344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.983762][T20246] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 578.102218][T20281] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 578.345082][T21704] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 578.356842][T20246] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 578.444979][T21703] netlink: 'syz.2.4079': attribute type 12 has an invalid length. [ 578.471058][T21703] netlink: 'syz.2.4079': attribute type 29 has an invalid length. [ 578.480165][T21703] netlink: 'syz.2.4079': attribute type 3 has an invalid length. [ 578.532209][T20246] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 579.499934][T21739] netlink: 'syz.4.4089': attribute type 2 has an invalid length. [ 579.508764][T21739] netlink: 'syz.4.4089': attribute type 2 has an invalid length. [ 579.520038][T21739] __nla_validate_parse: 5 callbacks suppressed [ 579.520064][T21739] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4089'. [ 579.665967][T21743] netlink: 81 bytes leftover after parsing attributes in process `syz.2.4091'. [ 579.695180][T21746] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4092'. [ 580.367801][T21777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4102'. [ 580.539158][ T987] IPVS: starting estimator thread 0... [ 580.593788][T21781] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4103'. [ 580.607971][T21784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4105'. [ 580.623570][T21784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4105'. [ 580.641365][T21781] ieee802154 phy1 wpan1: encryption failed: -22 [ 580.651058][T21782] IPVS: using max 27 ests per chain, 64800 per kthread [ 580.694879][T21786] netlink: 'syz.2.4106': attribute type 4 has an invalid length. [ 580.705754][T21786] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4106'. [ 580.738177][T21786] .`: renamed from bond0 (while UP) [ 580.932291][T21792] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4108'. [ 581.925241][T21834] geneve2: entered promiscuous mode [ 581.937026][T21834] geneve2: entered allmulticast mode [ 581.946122][T20269] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 581.990737][T20246] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 582.021260][T20269] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 582.043090][T20269] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 582.070434][T21840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4123'. [ 582.480374][T21848] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 582.509369][ T5741] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 582.577144][T20278] net_ratelimit: 45 callbacks suppressed [ 582.577168][T20278] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 582.731037][T20269] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 582.813100][T21872] syzkaller0: entered promiscuous mode [ 582.877185][T21872] syzkaller0: entered allmulticast mode [ 582.913891][T20269] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 583.128244][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.145532][T21887] netlink: 'syz.4.4138': attribute type 11 has an invalid length. [ 583.336836][T21885] lo: entered promiscuous mode [ 583.358183][T20281] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 583.387232][T21835] openvswitch: netlink: IPv4 tunnel dst address is zero [ 583.411613][T21835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.458357][T21885] lo: left promiscuous mode [ 583.571169][T20275] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 583.695957][T21908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.728178][T20246] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 583.934025][T21911] netlink: 'syz.1.4144': attribute type 21 has an invalid length. [ 584.259652][T21922] veth0: entered promiscuous mode [ 584.345833][T21922] veth0: left promiscuous mode [ 584.624660][T21943] __nla_validate_parse: 11 callbacks suppressed [ 584.624680][T21943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4156'. [ 584.910042][T21957] pimreg: entered allmulticast mode [ 585.149123][T21967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4163'. [ 585.432579][T21977] netlink: 'syz.4.4168': attribute type 1 has an invalid length. [ 585.455671][T21977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4168'. [ 585.485129][T21977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4168'. [ 585.507433][T21980] ip6t_rpfilter: unknown options [ 585.577283][T21982] netlink: 'syz.4.4168': attribute type 1 has an invalid length. [ 585.847071][T21996] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4174'. [ 586.179652][T22018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4181'. [ 586.202123][T22010] netlink: 'syz.3.4178': attribute type 39 has an invalid length. [ 586.210326][T22020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4181'. [ 586.321771][T22020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4181'. [ 586.344813][T22020] ip6tnl0: Caught tx_queue_len zero misconfig [ 586.660325][T22037] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4184'. [ 586.671873][T22037] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4184'. [ 586.724764][ T5749] IPVS: starting estimator thread 0... [ 586.840656][T22041] IPVS: using max 28 ests per chain, 67200 per kthread [ 587.070899][T22052] macvlan0: entered promiscuous mode [ 587.335659][T22065] netlink: 'syz.1.4194': attribute type 7 has an invalid length. [ 587.636999][T22080] SET target dimension over the limit! [ 587.671609][T20246] net_ratelimit: 51 callbacks suppressed [ 587.671630][T20246] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 587.810607][T20281] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 587.952705][T20281] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 588.082181][T20284] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 588.211685][T20269] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 588.226266][T22102] openvswitch: netlink: EtherType 300 is less than min 600 [ 588.321192][T20284] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 588.361474][ T5344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.470560][T20281] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 588.598893][T20269] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 588.637093][T22113] sctp: [Deprecated]: syz.2.4207 (pid 22113) Use of int in maxseg socket option. [ 588.637093][T22113] Use struct sctp_assoc_value instead [ 589.230860][ C0] bridge0: port 3(veth0) entered learning state [ 589.303078][T22148] netlink: 'syz.1.4212': attribute type 1 has an invalid length. [ 590.635185][T22167] __nla_validate_parse: 4 callbacks suppressed [ 590.635205][T22167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4221'. [ 591.828415][T22125] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 592.096338][T22175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4223'. [ 592.276185][T22175] hsr_slave_1 (unregistering): left promiscuous mode [ 592.334477][T22180] gre1: entered promiscuous mode [ 592.760966][T20275] net_ratelimit: 43 callbacks suppressed [ 592.760988][T20275] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 592.985361][T22209] tc_dump_action: action bad kind [ 592.994225][T22217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4236'. [ 593.035889][T22221] netlink: 'syz.1.4236': attribute type 1 has an invalid length. [ 593.101405][T22217] netlink: 'syz.1.4236': attribute type 1 has an invalid length. [ 593.131202][T20284] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 593.291695][T20284] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 593.420852][T20275] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 593.552325][ T5344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.612107][T20284] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 593.821513][T20246] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 593.952591][T20275] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 593.971750][T22251] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4247'. [ 593.994941][T22227] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 594.002529][T22252] IPVS: Error connecting to the multicast addr [ 594.045839][T22251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4247'. [ 594.091170][T19353] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 594.222018][T20275] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 594.350734][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.358053][ C1] bridge0: topology change detected, propagating [ 594.364805][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.372201][ C1] bridge0: topology change detected, propagating [ 594.850012][T22285] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4258'. [ 595.158263][T22300] netlink: 'syz.1.4263': attribute type 2 has an invalid length. [ 595.184515][T22300] netlink: 'syz.1.4263': attribute type 1 has an invalid length. [ 595.571394][T22312] ip6t_srh: unknown srh match flags 5F28 [ 596.030700][T22320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4268'. [ 596.060924][T22320] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4268'. [ 596.573540][T20281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.597175][T20281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.634949][T22348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.659653][T22355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.674022][T22355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.701454][T22361] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 596.718836][T22348] pimreg: left allmulticast mode [ 596.725159][T22348] dvmrp1: left allmulticast mode [ 597.144395][T22372] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.4282'. [ 597.803567][ T9] net_ratelimit: 39 callbacks suppressed [ 597.803601][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.851631][T20284] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 597.873535][T22398] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4290'. [ 597.991157][T20284] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 598.104855][T22407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4294'. [ 598.141654][T20281] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 598.155189][T22408] netlink: 'syz.1.4292': attribute type 1 has an invalid length. [ 598.180915][T22408] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4292'. [ 598.203354][T22411] macvtap0: entered allmulticast mode [ 598.223705][T22411] veth0_macvtap: entered allmulticast mode [ 598.281524][T20246] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 598.315476][T22411] netlink: 'syz.2.4295': attribute type 10 has an invalid length. [ 598.341683][T22408] sctp: [Deprecated]: syz.1.4292 (pid 22408) Use of int in max_burst socket option deprecated. [ 598.341683][T22408] Use struct sctp_assoc_value instead [ 598.406667][T22411] syz_tun: entered promiscuous mode [ 598.575768][T22424] netlink: 'syz.4.4297': attribute type 5 has an invalid length. [ 598.642499][T20246] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 598.659557][T22426] netlink: 'syz.1.4299': attribute type 3 has an invalid length. [ 598.838620][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.851647][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.861277][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.906795][T20281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.910953][ T5627] Bluetooth: hci4: command 0x0406 tx timeout [ 602.850715][T19353] net_ratelimit: 44 callbacks suppressed [ 602.850740][T19353] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 602.970783][T20246] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 602.991382][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.080856][T20246] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 603.191294][T19353] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 603.300705][T19353] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 603.410639][T20281] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 603.521250][T19353] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 603.630831][T19353] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 603.740696][T20281] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 603.956335][ C0] [ 603.958821][ C0] ====================================================== [ 603.965893][ C0] WARNING: possible circular locking dependency detected [ 603.973024][ C0] syzkaller #0 Not tainted [ 603.977470][ C0] ------------------------------------------------------ [ 603.984584][ C0] udevd/5616 is trying to acquire lock: [ 603.990165][ C0] ffff888077c6d070 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 603.999406][ C0] [ 603.999406][ C0] but task is already holding lock: [ 604.006793][ C0] ffff88802a372158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 604.016728][ C0] [ 604.016728][ C0] which lock already depends on the new lock. [ 604.016728][ C0] [ 604.027150][ C0] [ 604.027150][ C0] the existing dependency chain (in reverse order) is: [ 604.036207][ C0] [ 604.036207][ C0] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 604.044673][ C0] _raw_spin_lock+0x2e/0x40 [ 604.049782][ C0] sch_direct_xmit+0x15f/0x4c0 [ 604.055086][ C0] __dev_queue_xmit+0x177f/0x3820 [ 604.061130][ C0] hsr_forward_skb+0x152a/0x28c0 [ 604.066808][ C0] hsr_dev_xmit+0x242/0x360 [ 604.071865][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 604.077522][ C0] __dev_queue_xmit+0x14c0/0x3820 [ 604.083090][ C0] ip6_output+0x337/0x540 [ 604.088038][ C0] NF_HOOK+0x177/0x4f0 [ 604.092679][ C0] mld_sendpack+0x890/0xe10 [ 604.097721][ C0] mld_ifc_work+0x842/0xd60 [ 604.102764][ C0] process_scheduled_works+0xa8e/0x14e0 [ 604.108995][ C0] worker_thread+0xa47/0xfb0 [ 604.114121][ C0] kthread+0x388/0x470 [ 604.118742][ C0] ret_from_fork+0x514/0xb70 [ 604.123932][ C0] ret_from_fork_asm+0x1a/0x30 [ 604.129238][ C0] [ 604.129238][ C0] -> #0 (&hsr->seqnr_lock){+.-.}-{3:3}: [ 604.136983][ C0] __lock_acquire+0x1520/0x2cf0 [ 604.142410][ C0] lock_acquire+0x106/0x350 [ 604.147451][ C0] _raw_spin_lock_bh+0x36/0x50 [ 604.152750][ C0] hsr_dev_xmit+0x237/0x360 [ 604.157798][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 604.163466][ C0] __dev_queue_xmit+0x14c0/0x3820 [ 604.169207][ C0] ip_finish_output2+0xc4b/0x10b0 [ 604.174960][ C0] iptunnel_xmit+0x626/0xd10 [ 604.180157][ C0] ip_tunnel_xmit+0x195b/0x2040 [ 604.185726][ C0] __gre_xmit+0x19e/0x240 [ 604.190652][ C0] erspan_xmit+0xad5/0x1590 [ 604.195980][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 604.201637][ C0] sch_direct_xmit+0x257/0x4c0 [ 604.206951][ C0] __dev_queue_xmit+0x177f/0x3820 [ 604.212527][ C0] ip6_output+0x337/0x540 [ 604.217399][ C0] ndisc_send_skb+0xcb2/0x1650 [ 604.222938][ C0] addrconf_rs_timer+0x2d2/0x6c0 [ 604.228512][ C0] call_timer_fn+0x192/0x5e0 [ 604.233670][ C0] __run_timer_base+0x652/0x8b0 [ 604.239068][ C0] run_timer_softirq+0xb7/0x170 [ 604.244499][ C0] handle_softirqs+0x225/0x840 [ 604.249853][ C0] __irq_exit_rcu+0xca/0x220 [ 604.254994][ C0] irq_exit_rcu+0x9/0x30 [ 604.259797][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 604.266029][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 604.272593][ C0] rcu_is_watching+0x0/0xb0 [ 604.277670][ C0] page_table_check_clear+0x15e/0x500 [ 604.283668][ C0] __zap_vma_range+0x39db/0x4f20 [ 604.289153][ C0] unmap_vmas+0x390/0x550 [ 604.294054][ C0] exit_mmap+0x293/0x9f0 [ 604.298835][ C0] __mmput+0x118/0x420 [ 604.303585][ C0] exit_mm+0x221/0x2d0 [ 604.308199][ C0] do_exit+0x6cd/0x2360 [ 604.312981][ C0] do_group_exit+0x22d/0x2f0 [ 604.318120][ C0] __x64_sys_exit_group+0x3f/0x40 [ 604.323689][ C0] x64_sys_call+0x221a/0x2240 [ 604.328912][ C0] do_syscall_64+0x174/0x580 [ 604.334049][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.340512][ C0] [ 604.340512][ C0] other info that might help us debug this: [ 604.340512][ C0] [ 604.350768][ C0] Possible unsafe locking scenario: [ 604.350768][ C0] [ 604.358244][ C0] CPU0 CPU1 [ 604.363707][ C0] ---- ---- [ 604.369088][ C0] lock(&qdisc_xmit_lock_key#4); [ 604.374142][ C0] lock(&hsr->seqnr_lock); [ 604.381181][ C0] lock(&qdisc_xmit_lock_key#4); [ 604.388748][ C0] lock(&hsr->seqnr_lock); [ 604.393268][ C0] [ 604.393268][ C0] *** DEADLOCK *** [ 604.393268][ C0] [ 604.401588][ C0] 13 locks held by udevd/5616: [ 604.406425][ C0] #0: ffff88807c86d038 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 604.415518][ C0] #1: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 604.425022][ C0] #2: ffff888034f25738 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 604.435493][ C0] #3: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: page_table_check_clear+0x124/0x500 [ 604.445621][ C0] #4: ffffc90000007cc0 ((&ndev->rs_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5e0 [ 604.456454][ C0] #5: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x203/0x1650 [ 604.466415][ C0] #6: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x11e/0x540 [ 604.475510][ C0] #7: ffffffff8eb59cc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3820 [ 604.485542][ C0] #8: ffff8880558c5228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1143/0x3820 [ 604.498191][ C0] #9: ffff88802a372158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 604.508483][ C0] #10: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 604.518350][ C0] #11: ffffffff8eb59cc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3820 [ 604.528381][ C0] #12: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 604.537659][ C0] [ 604.537659][ C0] stack backtrace: [ 604.543565][ C0] CPU: 0 UID: 0 PID: 5616 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 604.543585][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 604.543595][ C0] Call Trace: [ 604.543603][ C0] [ 604.543609][ C0] dump_stack_lvl+0xe8/0x150 [ 604.543634][ C0] print_circular_bug+0x2e1/0x300 [ 604.543661][ C0] check_noncircular+0x12e/0x150 [ 604.543688][ C0] __lock_acquire+0x1520/0x2cf0 [ 604.543713][ C0] ? __siphash_unaligned+0x28d/0x3e0 [ 604.543808][ C0] ? skb_network_protocol+0x23d/0x400 [ 604.543829][ C0] ? hsr_dev_xmit+0x237/0x360 [ 604.543851][ C0] lock_acquire+0x106/0x350 [ 604.543870][ C0] ? hsr_dev_xmit+0x237/0x360 [ 604.543896][ C0] ? hsr_dev_xmit+0x237/0x360 [ 604.543917][ C0] _raw_spin_lock_bh+0x36/0x50 [ 604.543931][ C0] ? hsr_dev_xmit+0x237/0x360 [ 604.543958][ C0] hsr_dev_xmit+0x237/0x360 [ 604.543979][ C0] ? hsr_dev_xmit+0x2d/0x360 [ 604.544001][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 604.544026][ C0] __dev_queue_xmit+0x14c0/0x3820 [ 604.544051][ C0] ? irqentry_exit+0x218/0x8f0 [ 604.544068][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 604.544086][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 604.544102][ C0] ? irqentry_exit+0x218/0x8f0 [ 604.544121][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 604.544140][ C0] ? neigh_connected_output+0x1e7/0x470 [ 604.544211][ C0] ? eth_header+0x11b/0x200 [ 604.544252][ C0] ? __asan_memcpy+0x40/0x70 [ 604.544280][ C0] ? ip_finish_output2+0x3de/0x10b0 [ 604.544299][ C0] ip_finish_output2+0xc4b/0x10b0 [ 604.544319][ C0] ? ip_skb_dst_mtu+0x811/0xa50 [ 604.544335][ C0] ? ip_finish_output2+0x3de/0x10b0 [ 604.544355][ C0] ? ip_finish_output+0x40b/0x530 [ 604.544374][ C0] iptunnel_xmit+0x626/0xd10 [ 604.544399][ C0] ip_tunnel_xmit+0x195b/0x2040 [ 604.544426][ C0] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 604.544446][ C0] ? __pfx_gre_build_header+0x10/0x10 [ 604.544466][ C0] __gre_xmit+0x19e/0x240 [ 604.544481][ C0] ? __pfx___gre_xmit+0x10/0x10 [ 604.544496][ C0] ? iptunnel_handle_offloads+0x2fd/0x630 [ 604.544519][ C0] erspan_xmit+0xad5/0x1590 [ 604.544539][ C0] ? __pfx_erspan_xmit+0x10/0x10 [ 604.544555][ C0] ? __lock_acquire+0x683/0x2cf0 [ 604.544578][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 604.544602][ C0] sch_direct_xmit+0x257/0x4c0 [ 604.544620][ C0] ? __pfx_sch_direct_xmit+0x10/0x10 [ 604.544638][ C0] __dev_queue_xmit+0x177f/0x3820 [ 604.544656][ C0] ? __lock_acquire+0x683/0x2cf0 [ 604.544680][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 604.544698][ C0] ? ___neigh_create+0x1cd2/0x22b0 [ 604.544724][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 604.544743][ C0] ? neigh_resolve_output+0x428/0x720 [ 604.544768][ C0] ? eth_header+0x11b/0x200 [ 604.544787][ C0] ? __asan_memcpy+0x40/0x70 [ 604.544812][ C0] ? ip6_output+0x11e/0x540 [ 604.544832][ C0] ip6_output+0x337/0x540 [ 604.544853][ C0] ? __pfx_ip6_output+0x10/0x10 [ 604.544871][ C0] ndisc_send_skb+0xcb2/0x1650 [ 604.544888][ C0] ? kmem_cache_alloc_node_noprof+0x1f1/0x610 [ 604.544908][ C0] ? ndisc_send_skb+0x203/0x1650 [ 604.544926][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 604.544948][ C0] ? __pfx_dst_output+0x10/0x10 [ 604.544973][ C0] addrconf_rs_timer+0x2d2/0x6c0 [ 604.544996][ C0] ? call_timer_fn+0xd4/0x5e0 [ 604.545017][ C0] ? lock_acquire+0x106/0x350 [ 604.545038][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 604.545061][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 604.545080][ C0] call_timer_fn+0x192/0x5e0 [ 604.545102][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 604.545124][ C0] ? call_timer_fn+0xd4/0x5e0 [ 604.545145][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 604.545172][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 604.545186][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 604.545209][ C0] __run_timer_base+0x652/0x8b0 [ 604.545230][ C0] ? ktime_get+0x45/0x220 [ 604.545253][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 604.545275][ C0] ? ktime_get+0x1f5/0x220 [ 604.545293][ C0] ? lapic_next_event+0x11/0x20 [ 604.545329][ C0] run_timer_softirq+0xb7/0x170 [ 604.545350][ C0] handle_softirqs+0x225/0x840 [ 604.545368][ C0] ? __irq_exit_rcu+0xca/0x220 [ 604.545388][ C0] __irq_exit_rcu+0xca/0x220 [ 604.545404][ C0] irq_exit_rcu+0x9/0x30 [ 604.545420][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 604.545437][ C0] [ 604.545443][ C0] [ 604.545449][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 604.545467][ C0] RIP: 0010:rcu_is_watching+0x0/0xb0 [ 604.545492][ C0] Code: c7 c7 60 f3 b5 8e e8 3f 85 64 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 53 65 ff 05 a0 8f c1 11 e8 cb a1 26 0a 89 [ 604.545506][ C0] RSP: 0018:ffffc900043df588 EFLAGS: 00000202 [ 604.545521][ C0] RAX: ffffffff82404cd5 RBX: 0000000000000001 RCX: 0000000000000000 [ 604.545532][ C0] RDX: ffff88807fa95d00 RSI: 0000000000000001 RDI: 0000000000000000 [ 604.545542][ C0] RBP: 0000000000000001 R08: ffffffff82404ca4 R09: 0000000000000000 [ 604.545552][ C0] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: ffffea00004937b0 [ 604.545563][ C0] R13: 0000563adb899000 R14: ffffffff82404ca4 R15: ffffea0000493780 [ 604.545575][ C0] ? page_table_check_clear+0x124/0x500 [ 604.545596][ C0] ? page_table_check_clear+0x124/0x500 [ 604.545614][ C0] ? page_table_check_clear+0x155/0x500 [ 604.545636][ C0] ? page_table_check_clear+0x141/0x500 [ 604.545653][ C0] page_table_check_clear+0x15e/0x500 [ 604.545672][ C0] ? vm_normal_page+0x12c/0x280 [ 604.545694][ C0] __zap_vma_range+0x39db/0x4f20 [ 604.545735][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 604.545760][ C0] ? mas_find+0xab1/0xcf0 [ 604.545806][ C0] ? unmap_vmas+0x1b9/0x550 [ 604.545828][ C0] unmap_vmas+0x390/0x550 [ 604.545851][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 604.545882][ C0] exit_mmap+0x293/0x9f0 [ 604.545899][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 604.545926][ C0] ? __pfx_exit_aio+0x10/0x10 [ 604.545961][ C0] ? arch_uprobe_clear_state+0x1c8/0x240 [ 604.545985][ C0] ? uprobe_clear_state+0x2ac/0x3e0 [ 604.546013][ C0] __mmput+0x118/0x420 [ 604.546029][ C0] exit_mm+0x221/0x2d0 [ 604.546051][ C0] do_exit+0x6cd/0x2360 [ 604.546076][ C0] ? __pfx_do_exit+0x10/0x10 [ 604.546095][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 604.546116][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 604.546132][ C0] do_group_exit+0x22d/0x2f0 [ 604.546154][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.546170][ C0] __x64_sys_exit_group+0x3f/0x40 [ 604.546192][ C0] x64_sys_call+0x221a/0x2240 [ 604.546214][ C0] do_syscall_64+0x174/0x580 [ 604.546231][ C0] ? trace_irq_disable+0x3b/0x140 [ 604.546250][ C0] ? clear_bhb_loop+0x70/0xc0 [ 604.546268][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.546283][ C0] RIP: 0033:0x7fed2b8f16c5 [ 604.546297][ C0] Code: Unable to access opcode bytes at 0x7fed2b8f169b. [ 604.546327][ C0] RSP: 002b:00007ffe506a19e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 604.546343][ C0] RAX: ffffffffffffffda RBX: 0000563adb6d5040 RCX: 00007fed2b8f16c5 [ 604.546354][ C0] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 604.546364][ C0] RBP: 0000563adb6b3910 R08: 0000000000000000 R09: 0000000000000000 [ 604.546374][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.546383][ C0] R13: 00007ffe506a1a30 R14: 0000000000000000 R15: 0000000000000000 [ 604.546400][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 605.661923][T17742] bridge0: port 2(syz_tun) entered disabled state [ 605.790102][T17742] syz_tun (unregistering): left allmulticast mode [ 605.831488][T17742] syz_tun (unregistering): left promiscuous mode [ 605.859963][T17742] bridge0: port 2(syz_tun) entered disabled state [ 605.985687][T16501] team0: Port device syz_tun removed [ 606.102006][T20281] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.162639][T20281] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.207668][T20281] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.267180][T20281] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.357949][T20281] vlan2: left allmulticast mode [ 606.367640][T20281] geneve0: left allmulticast mode [ 606.375307][T20281] vlan2: left promiscuous mode [ 606.380280][T20281] geneve0: left promiscuous mode [ 606.386526][T20281] bridge0: port 3(vlan2) entered disabled state [ 606.395327][T20281] bridge_slave_1: left allmulticast mode [ 606.401468][T20281] bridge_slave_1: left promiscuous mode [ 606.407348][T20281] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.416490][T20281] bridge_slave_0: left allmulticast mode [ 606.423054][T20281] bridge_slave_0: left promiscuous mode [ 606.429084][T20281] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.441305][T20281] bond2: left allmulticast mode [ 606.501772][T20281] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 606.514044][T20281] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 606.599561][T20281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.620525][T20281] bond_slave_0: left allmulticast mode [ 606.627129][T20281] bond0 (unregistering): Released all slaves [ 606.637186][T20281] bond1 (unregistering): Released all slaves [ 606.649359][T20281] bond2 (unregistering): Released all slaves [ 606.662312][T20281] bond3 (unregistering): Released all slaves [ 606.792936][T20281] IPVS: stopping master sync thread 22361 ... [ 606.946682][T20281] hsr_slave_0: left promiscuous mode [ 606.954818][T20281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.963155][T20281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.974321][T20281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.982674][T20281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.000554][T20281] veth1_macvtap: left promiscuous mode [ 607.006134][T20281] veth0_macvtap: left promiscuous mode [ 607.011743][T20281] veth1_vlan: left promiscuous mode [ 607.017137][T20281] veth0_vlan: left promiscuous mode [ 607.212515][T20281] team0 (unregistering): Port device team_slave_1 removed [ 607.225428][T20281] team0 (unregistering): Port device team_slave_0 removed [ 607.331261][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 607.611898][T20281] IPVS: stop unused estimator thread 0... [ 607.683629][T20281] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.756642][T20281] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.775872][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 607.842107][T20281] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.923831][T20281] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.258329][T20281] bond0 (unregistering): Released all slaves [ 608.285446][T20281] bond1 (unregistering): Released all slaves [ 608.298701][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 608.343989][T20281] tipc: Disabling bearer [ 608.349994][T20281] tipc: Left network mode [ 608.446805][ T5808] net_ratelimit: 17 callbacks suppressed [ 608.446825][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.557051][T20281] hsr_slave_0: left promiscuous mode [ 608.565038][T20281] hsr_slave_1: left promiscuous mode [ 608.577677][T20281] veth1_macvtap: left promiscuous mode [ 608.585806][T20281] veth0_macvtap: left promiscuous mode [ 608.591913][T20281] veth1_vlan: left promiscuous mode [ 608.803689][T20281] team0 (unregistering): Port device vlan0 removed [ 609.048051][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4 [ 609.071232][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.079776][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.090183][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.099810][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.109047][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.393896][T20281] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.404896][T20281] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.471911][ T5344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.486666][T20281] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.497480][T20281] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.550243][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 609.598408][T20281] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.609502][T20281] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.681314][T20281] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.694452][T20281] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.829384][T20281] veth0: left allmulticast mode [ 609.840419][T20281] veth0: left promiscuous mode [ 609.846546][T20281] bridge0: port 1(veth0) entered disabled state [ 610.128281][T20281] bond1 (unregistering): Released all slaves [ 610.148038][T20281] bond2 (unregistering): Released all slaves [ 610.160275][T20281] bond3 (unregistering): Released all slaves [ 610.172566][T20281] bond0 (unregistering): Released all slaves [ 610.186283][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6 [ 610.375065][T20281] tipc: Left network mode [ 610.549919][T20281] hsr_slave_0: left promiscuous mode [ 610.557081][T20281] hsr_slave_1: left promiscuous mode [ 610.564467][T20281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.573515][T20281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.584146][T20281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.597098][T20281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.615353][T20281] veth1_macvtap: left promiscuous mode [ 610.621627][T20281] veth0_macvtap: left promiscuous mode [ 610.627977][T20281] veth1_vlan: left promiscuous mode [ 610.634976][T20281] veth0_vlan: left promiscuous mode [ 610.857224][T20281] team0 (unregistering): Port device team_slave_1 removed [ 610.883418][T20281] team0 (unregistering): Port device team_slave_0 removed [ 610.958123][T20281] team0 (unregistering): Port device dummy0 removed [ 611.003140][ T5273] 8021q: adding VLAN 0 to HW filter on device eth7 [ 611.259422][T20281] IPVS: stop unused estimator thread 0... [ 611.435892][ T5273] 8021q: adding VLAN 0 to HW filter on device eth8 [ 611.789950][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 612.150235][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 612.507466][ T5273] 8021q: adding VLAN 0 to HW filter on device eth11 [ 612.907325][ T5273] 8021q: adding VLAN 0 to HW filter on device eth12