last executing test programs: 10m2.93610071s ago: executing program 3 (id=150): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f000000ab00)={0x18, 0x2, {0x1, @private=0xa010101}}, 0x1e) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xffffffff}, 0x1c) connect$inet6(r5, &(0x7f0000000600)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r4, 0x0, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', 0x0}) sendmsg(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="87f5d2a340fd", 0x6}], 0x1}, 0x8010) sendmsg$nl_route(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x44800) bind$pptp(r3, &(0x7f000000ae00)={0x18, 0x2, {0x1, @local}}, 0x1e) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="01040800000000000000000000000000000000008edd0000"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000000a0601010000000d0000000000000000050001"], 0x40}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000001600156f000000000000000009005000a1df8e8d5103ea3c15099ced70af58a280e70157e9f2f5bd2758159db68f54f85dd3bdc9dc515ca373fc21b299bbd8c58b3b53ed", @ANYRES32=0x0], 0x18}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r10, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r11, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xf}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xac}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x30004004}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000010000000000000208000400", @ANYRES32=0x2, @ANYBLOB="060015"], 0x60}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x1f, &(0x7f0000000080)={0x0}, 0x9, 0x0, 0x0, 0x20040855}, 0x0) 10m2.712823165s ago: executing program 3 (id=157): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa22}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e00280002802400010020a107000003e700"/96, 0x60) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 10m2.524761144s ago: executing program 3 (id=160): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000000)=0x47a, 0x4) (async) recvmmsg$unix(r2, &(0x7f0000000b80)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000700)=""/134, 0x86}, {&(0x7f00000007c0)=""/80, 0x50}, {&(0x7f0000000840)=""/115, 0x73}, {&(0x7f00000008c0)=""/239, 0xef}], 0x4, &(0x7f0000000a00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}}], 0x1, 0x40012100, &(0x7f0000000bc0)={0x0, 0x989680}) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)={0x108, 0x41, 0x200, 0x70bd26, 0x25dfdbfb, "", [@generic="ccb33c2e2801b5d84f548ed7a16fd0f3ae80172312bff521220000", @generic="e954b0888285d2e1f0560d9a6ec34b7f4cc8d9e195a865c4381bde0afb915ebe72f71ef0e4b3bb4224b338d85cd2dd0a1f3ac9005779a8b97b73423037eab9f22cf9d972740000000001000000b16462019463bb3a21aeedb932458206024d140a8c972dce", @typed={0x8, 0xaa, 0x0, 0x0, @u32=0xd}, @generic="1c1654211eb363017b326c88bb81c64f5e12d9b963b5b6c0e1e06eafb986ecbb73d7c669aae57d7b6aa28b499955b2fbb82d1f6be3214209c4757fd0c6feb584ab0f6fa30c8708da63f7eb8f61c6071d1cd196507ab8646fc9c35e26c380e3cbd046bb6f1840", @generic="eaf8c61d932ed9"]}, 0x108}, {&(0x7f00000006c0)={0x10, 0x31, 0x8, 0x1, 0x25dfdbfb}, 0x10}, {&(0x7f0000000440)=ANY=[@ANYBLOB="180000201300040000fbd72f2508004b00000900", @ANYRES32=r1, @ANYBLOB], 0x18}], 0x3}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x20040600) r6 = socket$netlink(0x10, 0x3, 0x8000000004) openat$cgroup_type(r5, &(0x7f0000000240), 0x2, 0x0) (async) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x38}}, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4000}]}}]}, 0x40}}, 0x0) (async) mmap$xdp(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x180000a, 0x40010, r7, 0x100000000) (async) r11 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r11, 0x0, 0x81, &(0x7f00000005c0)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x75f, 0x1, 0x8, 0x7, 0xb], 0x0, 0x0}, 0x78) 10m1.592038463s ago: executing program 3 (id=176): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002940)=ANY=[@ANYBLOB="020a07020700000029bd7000f9dbdf2505001a00ffffff440000000000000000000000fe8800000000000000000000bf61b4a3260014ca"], 0x38}}, 0x4) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e370604000000000e000a000f00000002800000121fb5d40fe50fd818aa2ace3d3097100e432591c09749887f142086e5088491186b6f319374b17e5d285bc48d385576e5f47889ada2610405976d264a65c908d53c14f375e0bf6d2e187b2561a2a770ffa6c4f83de59f8fbefba6bed4b3926520e2086c7dbe68e159a434211b2862cdba45c351f3c141c9561ee8a2b320661f7cb02422f8d7ec8757214ae70b1e6a1cfcffffffffffffffc6e3c1cb4e662a9be3ed3cc38d87f855b3ca0c38bea923c6ce2f10c5bea2a0", 0xe3}], 0x1}, 0x0) 10m1.080466064s ago: executing program 3 (id=180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'bridge_slave_0\x00', 0x800}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) 10m0.954787103s ago: executing program 3 (id=184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x480d1}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = openat$cgroup_freezer_state(r1, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000140)='FROZEN\x00', 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000041000701fefeffff00000000017c0000040042801400018006000600800a000008001c00", @ANYRES32=r4, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a40000000060a010400000000000000000a0000040900010073797a31000000000900020073797a320000000014000480100001800b000100736f636b65740000140000001100010000000000000000000100000a75afac096548a8af0e2de2804999c64b3ce1b1072f044322a3e3a2046e25580f0e0fcb83e17d0837f839be9cb8bbe0124b82fc2764292074ee9e2a60f26358f53dd80ba15273d36822fcd3cd727962e4648e8b25ad8da59c8edb7daf6f9470b3f9b78e904381599a80591c51a0ede7f5ceced55df88f49a08696c9afbea19e9e7d22c00d8a91d60daa09"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 9m45.751331795s ago: executing program 32 (id=184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x480d1}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = openat$cgroup_freezer_state(r1, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000140)='FROZEN\x00', 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000041000701fefeffff00000000017c0000040042801400018006000600800a000008001c00", @ANYRES32=r4, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a40000000060a010400000000000000000a0000040900010073797a31000000000900020073797a320000000014000480100001800b000100736f636b65740000140000001100010000000000000000000100000a75afac096548a8af0e2de2804999c64b3ce1b1072f044322a3e3a2046e25580f0e0fcb83e17d0837f839be9cb8bbe0124b82fc2764292074ee9e2a60f26358f53dd80ba15273d36822fcd3cd727962e4648e8b25ad8da59c8edb7daf6f9470b3f9b78e904381599a80591c51a0ede7f5ceced55df88f49a08696c9afbea19e9e7d22c00d8a91d60daa09"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 2.993408867s ago: executing program 5 (id=5366): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) (async) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x5, 0x4) (async) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 2.828203368s ago: executing program 1 (id=5368): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000e40)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000640)={0x5}, 0x1) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4) bind$inet(r1, &(0x7f0000000300)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="bf160000000000007962a8000000000015020400000000001870658c4eb52af6415e7651bf13db110000", @ANYRES32=r2, @ANYBLOB="0000000000000000850000006c000000b70000000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x200) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1}, 0x4}], 0x1, 0x0, 0x0) recvfrom(r4, &(0x7f0000000380)=""/49, 0x31, 0x40010060, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110bd000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r6 = accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x800) r7 = socket$netlink(0x10, 0x3, 0x12) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r7) accept4$unix(r5, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e, 0x800) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000000c0)={0x5}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r7, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04012bbd7000ffdbdf256f00000008000300", @ANYRES32=r8, @ANYBLOB="0cdab4ea96aaf2ffff000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20004050) 2.798167509s ago: executing program 5 (id=5371): syz_80211_inject_frame(0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES16=r0, @ANYRES64=r0], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x8001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r4 = socket(0x200000000000011, 0x2, 0x1) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="09fe000500"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711221000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x1, 0x1, 0x0, 0x11, 0x0, 0x0, [{}]}]}, {0x0, [0x5f]}}, 0x0, 0x33}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40806685, &(0x7f0000000540)={0x1, 0x1, 0x1000, 0x2f, &(0x7f0000000440)="edfd928d2da189584a6df5689a517279853bd249bb6e55e3fe7a212b4c6b5a120912c8ddde20ac41f50e319b195148", 0xb4, 0x0, &(0x7f0000000480)="579d44c4fa1fbb950381f92aab58fd6782d7f1bdbd816c179f3f887c7a160b4646d6a015fa8e47587fb85b895c3ae0c4d4c759349c2f8b1fdc2b62f8efa6753b4b82e2da840fbf647dbaeb3631120ffab011efabf406f5c3f8f60e8ee6794ab08be40788fc315bc39a4bd82e5133ca35bb540b9d6bc1bad31fe2d63eecc57073c5a87f9e6bafa2b66040d3d3c2153fde9bd1e82ca6b714fb7ccf6cfdf108390254a26e482cbe6517f6bd56cba3dafafb174e5369"}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32}, @typed={0x8, 0x2, 0x0, 0x0, @u32=0x2000}, @typed={0x8, 0x3, 0x0, 0x0, @u32=0x1}]}, 0x2c}}, 0x0) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r10, 0x0, 0x0, 0xfffffe94, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)='H', 0x0}, 0x50) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0x1}, {0xffff, 0xa}, {0x1, 0x3}}}, 0x24}}, 0x40080) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000180)={0x4, &(0x7f0000000200)=[{}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}]}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x803, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x20040004) 2.108320149s ago: executing program 4 (id=5379): r0 = socket(0x1e, 0x5, 0x0) getsockname$packet(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8=r2, @ANYRESDEC=r2, @ANYRESDEC=r3, @ANYRES32=r3], 0x48}}, 0x0) 2.107859182s ago: executing program 2 (id=5380): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@setlink={0x40, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x60000}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_PHYS_SWITCH_ID={0xa, 0x24, "74d407540df1"}]}, 0x40}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r1], 0xec}}, 0x0) 2.106567844s ago: executing program 0 (id=5381): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0a000806000000000400aaaaaaaaaa2986dd6d002008002611"], 0x60) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000006050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000908000240000000010900010073797a30"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="b9ff03006044238cb89e14f088a81bff88a800008100630677fbac141442e934a0a662079f4b4dfe87e5feca6aab845013f288a81a3908020b098da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) 2.028030305s ago: executing program 4 (id=5382): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r2, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "1daa02bcd44ce68f81a175ecdfb33700"}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x5}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "387b1aff296cbfbe425ad463e4f35467"}]}}]}, 0x64}}, 0x4800) 1.960986244s ago: executing program 2 (id=5383): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f0000001780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe04, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0xfffffffffffffd00}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x1c}, {0xc, 0x3}, {0xc}}}]}]}, 0x60}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000ff000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800090006"], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xb, 0x7, 0x0) 1.784046262s ago: executing program 1 (id=5384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xac, r2, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x754c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x40) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0x290, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x42}}}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x52}, @device_b, @device_b, @initial, {0x8, 0x1}, @value=@ver_80211n={0x0, 0x81, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1}}, @tdls_setup_cfm={0xc, 0x2, {0x31, 0x80}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x19e}, @NL80211_ATTR_FRAME={0x20d, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_a, @from_mac, {0xd, 0xe53}, @value=@ver_80211n={0x0, 0x2, 0x2, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x7c02, 0x2, @broadcast, {0x0, 0x4, @random="07c56772"}, @void, @val={0x2d, 0x1a, {0x800, 0x0, 0x5, 0x0, {0xaa, 0x8, 0x0, 0x81, 0x0, 0x0, 0x1}, 0x1, 0x0, 0x1}}, [{0xdd, 0x95, "9d5c2e78f76963fde0e0292926d5166b01d1c0e05d9f58b4b5ac9abc14b8e67558ce573dc1dc445ff9d63b4b8219ddac55f70ed3442ca134f274a83ca43e95539af4ba709a8a52356395ce71f51a22704498fd5d6a512a62542fc0b04930014d14f3db34e19db0cee1db3e0aa986dcdb9e0f74f081d413e86362018eb6a5cde9d5e89fc844ebccc8a55bf63e44d213c7569c3b0c0a"}, {0xdd, 0xe1, "3780f18dbef6ef697e6ba758aeedfb0693b336ce07316707d183cdae947bf137ada005991c214b5c5c3b25c865baa6074fecac28edfd72877a5483dc939a9280622ca4dc208c561e1bbbc16a98553df635b4e7058c138ff3cb573144781e6774872abbd7a081bbe04afd9b6034578891922d1f3d76eb023e38b15281a10554b0dd024cef303d33419717d742cb971b3b4c02823e8bdd56c252df371a3b52f0f6ce245cfc2f48c7d6c4bafc6fd8f1ca16b7a2e0696d329818d60f82b4c4e36976bdcf8c7ce6ae6fe7329e7942e17fd2a758c2d848e1d67d419b76f06b9b56d4a07f"}, {0xdd, 0x45, "3c225a293dc9a6d20e01fa2f69416f96209f33ccfd88dfed6a6ee469db0e02fecfad1ecc64de554e1b31dd719258f82e96065aed0e12681603671bd5482a0f93781b10d5ce"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x18, 0xcd, [0xc2f, 0x53d, 0x2a6, 0x10, 0x0, 0x6b0e, 0x8, 0x3ff, 0x7, 0x91]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x6, 0x6e37, 0x9, 0x3, 0x3]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x290}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r4, &(0x7f0000001900)={&(0x7f0000000700)={0x2c, 0x0, 0x0, 0x2e}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="1d07dfeedabb05daa8dd7f9d12a41aa9f0da67f21aa3930ca949e1c17c6675653e4c296c66ef49885e1014af5bfbf4de9f7e966d9719fdfea306c6cc58138db6fefa67936c1fc46ea1915ef4006d123f3791724a3182881ffa764adc94780d0437f9fc7b", 0x64}, {&(0x7f00000017c0)="abd8792eb63428d5f3abee55ed81f14e4d0f78b79606538682b4e7ab4a6885d8bae9ec7274a12666d67d5d280e3a55a13b1d935b7ccc35cea76e44a37a3a96ec3b4e6e4343d1efcb1445a56538b809e0458717c0809bf3ba62e7c12208f791d1cd13bb2008481bc4141153f70e8a894e1672f06561b6f83f71246c047cf97d59d436758ace6c9f08b0d0fc4e9e398350245dc4c404d75a8793de9ca5b5f683444c4bf79328faaccc42eb63497e119e52a09a5b949f5e2cc20b49214c851d7f77a8a981c390fd20d7451955f0e51180c24006cdf9500f5d49b74ebd50086970a1c59912bea937a1ff17e1bbca817c0d6232e3", 0xf2}], 0x3, 0x0, 0x0, 0x400c009}, 0x4004000) r5 = accept(r0, 0x0, &(0x7f0000001940)) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000019c0), r0) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x40, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x20}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004084}, 0x20000001) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001b00), r5) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x44, r8, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x60}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088}, 0x10) sendmsg$NL80211_CMD_PROBE_CLIENT(r5, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x2c, r3, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x32}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c4}, 0x40) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001d80), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000001ec0)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x98, r9, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xcb7}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x10000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001f40), r5) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r10, &(0x7f00000020c0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002080)={&(0x7f0000001f80)={0xf0, r11, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40000}, 0x4) getsockname$packet(r5, &(0x7f0000002100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002140)=0x14) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000002180)={r10, 0x5, 0x1}) sendmsg$TIPC_NL_NODE_GET(r12, &(0x7f00000024c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002480)={&(0x7f0000002200)={0x274, r2, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x46}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x469}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6a}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6072304c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3cc7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x93}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe7a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x18e5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x10, 0x3, "9136b44963b35cc31fc44f48"}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x70000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x70, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x8, 0x3, "69c16aad"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x40800) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000002680), r12) sendmsg$TIPC_CMD_SHOW_PORTS(r12, &(0x7f0000002740)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x1c, r13, 0x2, 0x70bd26, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20800}, 0x840) sendmsg$BATADV_CMD_GET_DAT_CACHE(r12, &(0x7f0000002840)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x24, r8, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8880}, 0x4040000) syz_genetlink_get_family_id$tipc2(&(0x7f0000002880), r7) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 1.783636241s ago: executing program 2 (id=5385): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001e0000010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000080)={{0x2, 0x4e24, @local}, {0x1}, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 'syzkaller0\x00'}) 1.779945764s ago: executing program 4 (id=5386): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0x601, 0x4000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x8, 0xffff}, {0x300, 0x9702fd4b6861288c}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x8}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x40}}, 0x8000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f00000000000000000c00"], 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x800) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) 1.690983582s ago: executing program 2 (id=5387): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000006040000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) (async) r0 = socket$inet(0x2, 0x4, 0xfffffffc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) (async, rerun: 64) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) (async, rerun: 64) r2 = socket$inet(0x2, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000300000a1400000011000100000000000000000005006d0a"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8014) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000040)=0x7f, 0x4) (async, rerun: 64) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) (async, rerun: 64) unshare(0x6020400) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r4, 0x300) listen(r2, 0x7) (async) listen(r1, 0x0) (async) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000bc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) connect$bt_sco(r5, &(0x7f0000000d40)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000200)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async, rerun: 32) r7 = socket$inet(0x2, 0x800, 0x2) (async, rerun: 32) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x2, 'bond0\x00', 0x2}, 0x18) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00025ba0400580400ff682ddc"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (async) socket$inet(0x2, 0x2, 0x0) (async, rerun: 32) r8 = accept$inet(r0, &(0x7f0000000100), &(0x7f0000000140)=0x10) (rerun: 32) setsockopt$inet_mreqn(r8, 0x0, 0x24, &(0x7f00000000c0)={@multicast2, @broadcast}, 0xc) 1.675718868s ago: executing program 5 (id=5388): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448e2, &(0x7f0000000300)) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r4, @ANYRES64=r2, @ANYBLOB="0000000a010000001800120001000000000000000c000200080003003624eb87ae2fec1d9541bc1d94792c85a57bcd78af2956bffa9380cb7dc59a4ee70eed1841550000000000619fa8e7b4d97e0000"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r3, 0x3, 0x71061}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x800}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}]}}}]}, 0x40}}, 0x24008044) 1.6123583s ago: executing program 1 (id=5389): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="940000000002010400000000000000000200000020000280140001a00800010000000000080002007f00000106000340000200003c0003802c00018014000300000000000000000000000000000000001400040000000000000000000000ffffe00000010c00010000000000240001801400018008000100ac1e000108000200ac1414020c000280050001"], 0x94}}, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000012006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_INNER_FLAGS={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x37}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000) 1.610900017s ago: executing program 0 (id=5390): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x80, 0x8000, 0x9, 0x100007, {{0x5, 0x4, 0x2, 0x3b, 0x14, 0x64, 0x0, 0xff, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009112da000000000095", @ANYRES16=r0], &(0x7f00000002c0)='GPL\x00', 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfdea, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newsa={0xf8, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@dev, 0x0, 0x3c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000340), 0x10) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "d482449a"}}}}}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r3, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008000000000000000000000001834000000000000000000009500"/40], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.48398325s ago: executing program 4 (id=5391): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7800000600"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00P'], 0x78}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="40005200060010"], 0x24}}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000500)={0x18, 0x0, {0x1, @empty, 'wg0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000040)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r4, 0x40047438, &(0x7f0000000040)) write$ppp(r4, &(0x7f00000001c0)="ab29", 0x2) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002f00090025bd700000000000040000000c000c00577ab93591f094e9"], 0x20}, 0x1, 0x0, 0x0, 0x42004}, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7800000600"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00P'], 0x78}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="40005200060010"], 0x24}}, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) (async) connect$pppoe(r3, &(0x7f0000000500)={0x18, 0x0, {0x1, @empty, 'wg0\x00'}}, 0x1e) (async) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000040)) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl(r4, 0x40047438, &(0x7f0000000040)) (async) write$ppp(r4, &(0x7f00000001c0)="ab29", 0x2) (async) socket$netlink(0x10, 0x3, 0x10) (async) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002f00090025bd700000000000040000000c000c00577ab93591f094e9"], 0x20}, 0x1, 0x0, 0x0, 0x42004}, 0x80000) (async) 1.480740615s ago: executing program 0 (id=5392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x314, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_DESC={0x2d0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x134, 0x2, 0x0, 0x1, [{0x4}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xaee4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9ebf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2ae4b0b2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80b}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xaa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, {0x4}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_CONCAT={0x54, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf818}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcae}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFTA_SET_DESC_CONCAT={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x91}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_CONCAT={0xec, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf1db}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc9d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x49c}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3d}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1d3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffa845}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_SET_POLICY={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x38c}}, 0x20008844) 1.334690099s ago: executing program 1 (id=5393): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, &(0x7f0000000240)) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000001480)=0x2, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000140)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f00000001c0)={'full', 0x20, 0x3, 0x20, 0x100}, 0x2f) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x9}}]}, 0x38}}, 0x4000010) r8 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0xfe33) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x4, 0x4, 0xf9, 0x7b, 0x50, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x8038, 0x40, 0xe37}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x9, 0x1, 0x48, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x8, 0x59, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0x4, 0x2c, @private0, @dev={0xfe, 0x80, '\x00', 0x41}, 0x40, 0x7800, 0xef5b, 0xffff8001}}) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r13, {0x0, 0x2}, {0x1, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000005c0)={'wg0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111dc000000000006000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_STATS_GET(r4, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0x100, r5, 0x400, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_STATS_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STATS_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_STATS_SRC={0x8, 0x3, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000840) r16 = openat$cgroup_pressure(r2, &(0x7f0000000200)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r16, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) r17 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r17, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x1f8, 0x21, 0x4, 0x70bd28, 0x25dfdbfb, {0x17}, [@generic="79a96c64461ad190cce354a395285985c5e28a15463a447367d4f2ac78e38462e0b3f30a93ffd047289a3edb46df4afacfa959e1db1f436031545f3067e66948486fe15eae942e6693de91ee4dab98f2602bbed4a64938239e551b2b1f4349bb8059b1ed9483ea9ae133554fd50001aa61219f19578c24cceeb023d12499", @generic="43cf2d0bb75a0319cd307d1c1511d6956b8448316fa9e0279607bd17a94c63ce878b69a4b0bf774fa716225601dc66ee3aa9ab353e6f0222a73a9f4b02594fae635defc36788b685cc343ef1921aec15de3c22a281beaeeacda08ad7dc8992fd11e0dab9f52a8714aa04f88bd5b8543224ad2cef6e8aa4c72af5e9ec3374fa46efe5455f18ef7e5c808e9abff9f5eb71641f9a8620bd972a111dc7e7fc798ae11aa71f9746a789db33badb5115433981f7c875dc28039afa5d49fc136ecd9a31f5b890c9cdaf9190a67251017fb27a3937a52c7727700ce4f0df642c75b9a00c788b5d84a84a923a285b77100831ae7c2d138da0a4c6cc", @nested={0x2b, 0xea, 0x0, 0x1, [@generic="8428cc1c504fad5b7522e496a7346032d5ede5455045fc260921c17004e7dbcd75012edcf5a288"]}, @typed={0xc, 0x33, 0x0, 0x0, @u64=0xffffffffffffffff}, @nested={0x34, 0x108, 0x0, 0x1, [@typed={0xc, 0x11c, 0x0, 0x0, @u64=0x3}, @typed={0x4, 0xaf}, @nested={0x4, 0xab}, @typed={0xc, 0x70, 0x0, 0x0, @u64=0x2}, @nested={0x4, 0xcf}, @nested={0x4, 0xc2}, @typed={0x8, 0x116, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4000000}, 0x9080) 1.26900428s ago: executing program 0 (id=5394): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000130700000000000000007f00000100000000000000000000000000000000000001000000ffffac14140000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000697f00000000000000000001000000002b000000ff0204000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020004000000000000000000600012"], 0x150}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x28, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x18, 0xf2, 0x0, 0x1, [@typed={0x14, 0x4, 0x0, 0x0, @ipv6=@mcast2}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0xb2, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x7c, 0x2b, 0x0, @private2, @local, {[@srh={0x3b, 0x2, 0x7, 0x1, 0x0, 0x0, 0x0, [@dev]}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000130700000000000000007f00000100000000000000000000000000000000000001000000ffffac14140000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000697f00000000000000000001000000002b000000ff0204000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020004000000000000000000600012"], 0x150}}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x28, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x18, 0xf2, 0x0, 0x1, [@typed={0x14, 0x4, 0x0, 0x0, @ipv6=@mcast2}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) syz_emit_ethernet(0xb2, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x7c, 0x2b, 0x0, @private2, @local, {[@srh={0x3b, 0x2, 0x7, 0x1, 0x0, 0x0, 0x0, [@dev]}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) (async) 1.229069796s ago: executing program 0 (id=5395): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='GPL\x00', 0x210000, &(0x7f0000000040)={@align=0x80, {0x7, 0xa430, 0x4, 0x1}}, 0x7, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x7}) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0xf7, r4, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @rand_addr, @private}, &(0x7f0000000300)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb0, r1, 0xb01, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x10}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20040081}, 0x20000811) (async, rerun: 64) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 64) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000019080)=@assoc_value={r9, 0x7f}, &(0x7f00000190c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000500)={r9, @in6={{0xa, 0x4e23, 0xc72, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}}, &(0x7f00000005c0)=0x84) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f00000004c0)=0x1c, 0x4) 1.178545743s ago: executing program 5 (id=5396): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x2c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000002d0007012bbd7000fedbdf25077c1000080001800400dd80040003803f0002"], 0x60}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) 1.012292129s ago: executing program 4 (id=5397): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x38, r2, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x38}}, 0x0) r3 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmsg$alg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="f5a9496032", 0x5}, {&(0x7f00000002c0)=']', 0x1}], 0x2}, 0x55) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x38, r2, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x38}}, 0x0) (async) accept4$alg(r0, 0x0, 0x0, 0x800) (async) sendmsg$alg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="f5a9496032", 0x5}, {&(0x7f00000002c0)=']', 0x1}], 0x2}, 0x55) (async) 741.269767ms ago: executing program 1 (id=5398): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRESHEX], 0x84}}, 0x4000080) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x2, {0x0, 0x0, 0x4}, 0x1}, 0x18) connect$packet(r3, &(0x7f0000000140)={0x11, 0x10, r6, 0x1, 0x3}, 0x14) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r11 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x1, 0xb7, 0x7, 0x3}, {0x6, 0xb, 0x6, 0xffffffff}]}, 0x10) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r12, 0x29, 0x17, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x40040) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b80000001500010000000000feffffffe0000002000000000000000000000000fe8000000000000000000000000000aa00000000000000000a00102000000000", @ANYRES16=r2, @ANYRESOCT=r4, @ANYRESHEX=r9], 0xb8}}, 0x400) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r15, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 680.929686ms ago: executing program 4 (id=5399): unshare(0x20000400) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1fad229118b2b404, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x3}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r0], 0x18}, 0x1, 0x0, 0x0, 0x24000800}, 0x14008000) recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f00000008c0)=""/67, 0x43}, {&(0x7f0000005780)=""/4093, 0xdaf}, {&(0x7f0000000580)=""/151, 0x97}, {&(0x7f00000003c0)=""/109, 0x6d}, {&(0x7f0000000440)=""/127, 0x7f}], 0x6}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000005740)=[{&(0x7f0000003580)=""/4088, 0xff8}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x2}, 0x900000}], 0x7, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x0, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x10000, 0x5, 0x8, 0xffffff81, 0xaba9}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x32752275d7d1e3ca, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0x349, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdfd45c12945"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$tipc(0x1e, 0x72e50331c52b945a, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'nicvf0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}}) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}, 0x1, 0x0, 0x0, 0x20000814}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000019000100000000000000000002000000000000000000000008000400", @ANYRES32, @ANYBLOB="08001e004e"], 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x41}}, &(0x7f0000000480)='GPL\x00', 0x7}, 0x90) 520.594018ms ago: executing program 2 (id=5400): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x4c}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4000050) 408.702759ms ago: executing program 0 (id=5401): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x98}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) pselect6(0x40, &(0x7f0000000180), 0x0, 0xfffffffffffffffc, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000e0ff00000000000000000000630100000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) close(r4) (async) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0xb, 0xfffffff7, 0x9, 0x3, 0x10008, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x19, 0x10001, 0x25, 0x63c4, 0x0, 0xffffffffffffffff, 0x1, '\x00', r3, 0xffffffffffffffff, 0x0, 0x3}, 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0x6, 0xb29f, 0xd0, 0x8, 0x60040, 0x1, 0xffffb5e0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x6, 0xc, &(0x7f0000000f00)=@raw=[@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @func, @call={0x85, 0x0, 0x0, 0x81}, @map_fd={0x18, 0xa}], &(0x7f0000000f80)='syzkaller\x00', 0x4, 0x77, &(0x7f0000000fc0)=""/119, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001100)={0x1, 0x3, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, r7, r8, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0xfff}, 0x94) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r3, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e80)={r4, 0x0, 0x20, 0xce, &(0x7f0000000200)="8aa105082a10ff2b6cbdd661f65e6cfdfe86cb0571f74e7136f3fdc26fa1b3e0", &(0x7f0000000d00)=""/206, 0x4, 0x0, 0x19, 0x40, &(0x7f0000000e00)="ded1860d481c680e9ae7fbb951a588a9e6a4cb17461d419ce8", &(0x7f0000000e40)="eb95bf2fd29147940d1b97840eeeba4f610d0caa9a2f1bd5920fbdc6ef2fda111aba7f3e48aaa2988b47e2022558b84380b2353e455b68526e4b93d26d703842", 0x0, 0x0, 0x9}, 0x50) r10 = socket$netlink(0x10, 0x3, 0x14) (async) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r11, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x5c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffff00, 0xffffffff, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @empty}]}}]}, 0x5c}}, 0x4040004) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000480), 0x4) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f00000004c0)={0x0, 0x1e, 0x200000002000, 0x1}) (async) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r14, @ANYBLOB="0000000000000000b703000000040000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000008c0)={r13, 0x3, 0x1, [0x8, 0x24, 0x22, 0x7fffffffffffffff], [0x3ff, 0xffffffffffffff7c, 0x1, 0xe, 0x8, 0x5, 0x2, 0x7, 0x40, 0x4798, 0xf, 0x9, 0x6, 0x7, 0x95ab, 0xad61, 0xffffffffffffffc0, 0x9, 0x8, 0xffffffff, 0x7, 0x2, 0x737, 0x4, 0x0, 0x4, 0x8, 0x29, 0xcec2, 0x7000000000000000, 0x4, 0x1, 0x10001, 0x2, 0x1, 0x8, 0x4, 0x200000000000, 0x4, 0x10, 0x75, 0x0, 0x9, 0x1, 0x1, 0x56fe, 0x0, 0xfffffffffffff800, 0x9, 0x972, 0xfffffffffffffff9, 0x4, 0x100000000, 0x7, 0x7fffffff, 0x2, 0x5, 0x2, 0x100000000, 0x6a2, 0x10b7, 0x5, 0x3a4, 0x2, 0xcf7a, 0x1ff, 0x4, 0x6, 0x7, 0xaf, 0xac0d857, 0x1000, 0x9, 0x4d, 0x3, 0x92d2, 0x3, 0xffffffff, 0xfffffffffffff1b7, 0x5, 0x10000, 0x5, 0x8000000000000000, 0x4, 0x7fffffff, 0x9, 0xf, 0xaea8, 0x28000000000000, 0xc3c, 0x1, 0x6, 0xffff, 0x4, 0x7ff, 0x3a7c00, 0x5f, 0x0, 0x7, 0x400, 0xff, 0x7, 0x581, 0x8, 0x8, 0x7ff, 0x1, 0x7fff, 0x100000000, 0x3, 0x20000000400000, 0x9, 0x1, 0x0, 0x0, 0xfff, 0x9, 0x2, 0x7, 0x0, 0x2]}) 267.37701ms ago: executing program 1 (id=5402): openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[], 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, 0x0, 0x4008005) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044051}, 0x20000000) (async) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044051}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f00000007c0)={{r1, &(0x7f0000000000)='\x00', 0x881, &(0x7f0000000080)={@_ha_fsid={[0x80000000, 0x636]}, {0x1, 0xffff, 0x4, 0x1}}, 0x7, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000300)=0x99}, 0x3, &(0x7f0000000740)=[{0x3, 0xb5, &(0x7f0000000380)='nfc\x00', &(0x7f0000000500)="afa47cfc34ae864c2005e16a52834ab48da8d8a90895bf5d121b9e9c69251f124ee751e798771cc951126a0d7159d76ed6f492511010fe0719b5b90330a951d8ba783a4658189153a60490076c12cbd66ae4443706ac83402e475832ba2523c6e552271eb8068e62f9a85edd42458ebb342fbd8151ec5499924c3fc728dd45b965b642a2", 0x84, 0x3a}, {0x3, 0x6, &(0x7f00000005c0)='[[)#.\x00', &(0x7f0000000600)="e10dd743e2e4471824976d75f030c9b3", 0x10, 0x20}, {0x1, 0x4, &(0x7f0000000640)='#\x00', &(0x7f0000000680)="bb667da892fa18dd53437203b4aedd81b24ed11d1d581e9ef18d11791a33c75c690fce86028b13dc8b36c3e2fc46e7b7cb763b51236f286f997e8700157dbffaefcebf38c06b5300020a50c3743dee0437ea330508a7651dcb8e29e0c8de9307d8dff9cc3c9dc43d3bef93b0219632ec030011a57205ed6609408f6e5dc78226e1c16cc583a9530e7e7f11965400ab4932e613446e08", 0x96, 0x12}]}) r9 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f0000000400)={r10, 0x3, 0x0, 0x5586}) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r11, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r12, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6c}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r10}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x37}}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r12, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40800) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="610506"], 0xad) (async) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="610506"], 0xad) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690036000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690036000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) 216.223059ms ago: executing program 2 (id=5403): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000106c2e231d006c662176abdf38740000", @ANYRES32=0x0, @ANYBLOB="000000009002010008001c00", @ANYRES32=r2, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'ip6gre0\x00'}}, 0x1e) (async) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000080)={0xa00}, 0x4) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@func_proto, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr, @func={0x4, 0x0, 0x0, 0xf, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x4e}, 0x28) ioctl(r4, 0x40047438, &(0x7f0000000040)) (async) ioctl$PPPIOCCONNECT(r4, 0x4004743a, &(0x7f0000000180)=0x7) 74.562775ms ago: executing program 5 (id=5404): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0xffffffffffffffe9, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 0s ago: executing program 5 (id=5405): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x28011, r1, 0xb2463000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000080), 0x4) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01082abd7000ffdb9f251200000008000300", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000000000500e40001"], 0x30}, 0x1, 0x0, 0x0, 0x4000855}, 0x20000010) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c9000000140031"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) kernel console output (not intermixed with test programs): 20144] netlink: 'syz.5.3588': attribute type 1 has an invalid length. [ 491.186825][T20144] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3588'. [ 491.317607][T10616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.563456][T20156] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3590'. [ 492.043039][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.292860][T20183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.359899][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.562205][T20199] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 492.565867][T20176] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 492.658600][T20208] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 492.709456][T20212] netlink: 'syz.1.3605': attribute type 30 has an invalid length. [ 493.061757][T20223] netlink: 'syz.4.3608': attribute type 30 has an invalid length. [ 493.102604][T20225] netlink: 'syz.0.3606': attribute type 21 has an invalid length. [ 493.381366][T20244] pimreg: entered allmulticast mode [ 493.385627][ T52] Bluetooth: hci2: ISO packet for unknown connection handle 2723 [ 493.395851][T20246] netlink: 'syz.4.3612': attribute type 1 has an invalid length. [ 493.479777][T20246] bond1: (slave geneve3): making interface the new active one [ 493.480296][T20246] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 493.485818][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 493.502452][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 493.504306][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 493.504341][ T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 493.543298][T20246] netlink: 'syz.4.3612': attribute type 1 has an invalid length. [ 493.832816][T20239] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 494.437619][T10616] net_ratelimit: 5 callbacks suppressed [ 494.437639][T10616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.507517][T20299] netlink: 'syz.2.3625': attribute type 15 has an invalid length. [ 494.574989][T20300] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 494.635832][T20302] ip_tables: iptables: counters copy to user failed while replacing table [ 494.648588][T20306] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 494.783838][T20310] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 495.159857][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.207032][T20338] validate_nla: 33 callbacks suppressed [ 495.207051][T20338] netlink: 'syz.2.3635': attribute type 10 has an invalid length. [ 495.217515][T20340] netlink: 'syz.5.3634': attribute type 1 has an invalid length. [ 495.233312][T20338] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 495.235059][T20338] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 495.235497][T20338] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 495.235661][T20340] bond0: option mode: unable to set because the bond device has slaves [ 495.344594][T20344] openvswitch: netlink: Key 4 has unexpected len 8 expected 12 [ 495.404139][T20347] veth0: entered promiscuous mode [ 495.478367][T10616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.629451][T20355] __nla_validate_parse: 19 callbacks suppressed [ 495.629470][T20355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3640'. [ 495.631700][T20355] vxcan0: tx address claim with different name [ 496.211836][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.516340][T20346] veth0: left promiscuous mode [ 496.530501][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.874653][T20382] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3647'. [ 496.963015][T20390] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 497.402822][T20401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3650'. [ 497.402850][T20401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3650'. [ 497.402914][T20401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3650'. [ 499.632168][T20367] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 499.637884][ T9] net_ratelimit: 14 callbacks suppressed [ 499.637903][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.813468][ T921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.932156][T20407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.985983][T20407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.986909][T20412] ip_tables: iptables: counters copy to user failed while replacing table [ 500.015978][T20407] bond0 (unregistering): Released all slaves [ 500.418275][T20427] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3658'. [ 500.479349][T20428] ip6gre2: entered allmulticast mode [ 500.661442][ T1859] IPVS: starting estimator thread 0... [ 500.678121][T10616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.760542][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.765917][T20443] IPVS: using max 31 ests per chain, 74400 per kthread [ 501.055923][T20460] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 501.105985][T20454] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.106515][T20454] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.106649][T20454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.491998][T20476] xt_hashlimit: size too large, truncated to 1048576 [ 501.720942][T10616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.797456][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.821940][T20493] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 501.821977][T20493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.976032][T20497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3678'. [ 502.097700][T20499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3679'. [ 502.358154][T20517] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3682'. [ 502.358192][T20517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3682'. [ 502.430961][T20516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3683'. [ 502.597507][T20519] netlink: 'syz.2.3684': attribute type 1 has an invalid length. [ 502.597530][T20519] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3684'. [ 502.598342][T20519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.785237][T20529] wg2: Caught tx_queue_len zero misconfig [ 502.976400][T20539] netlink: 'syz.2.3689': attribute type 11 has an invalid length. [ 503.286714][T20555] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3694'. [ 503.286873][T20556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3694'. [ 503.529983][T20564] netlink: 'syz.0.3695': attribute type 1 has an invalid length. [ 503.661938][T20575] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 503.727030][T20564] block nbd296: server does not support multiple connections per device. [ 503.762979][T20564] block nbd296: shutting down sockets [ 503.803001][T20574] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3699'. [ 504.437083][T20608] TCP: TCP_TX_DELAY enabled [ 504.598092][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 504.816118][T20621] net_ratelimit: 7 callbacks suppressed [ 504.816141][T20621] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 504.816316][ T5968] IPVS: starting estimator thread 0... [ 504.847657][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.907773][T20631] IPVS: using max 34 ests per chain, 81600 per kthread [ 504.917838][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.040818][T20644] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3720'. [ 505.122420][T20646] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 505.754538][T20694] openvswitch: netlink: Key type 31 is not supported [ 505.849197][T20694] netlink: 'syz.4.3733': attribute type 1 has an invalid length. [ 505.849218][T20694] netlink: 'syz.4.3733': attribute type 3 has an invalid length. [ 505.849233][T20694] NCSI netlink: No device for ifindex 813332851 [ 505.885859][T10616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.890107][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.957415][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.919229][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.998081][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.620641][ T12] bond22 (unregistering): (slave erspan1): Releasing active interface [ 507.869605][ T12] bond1 (unregistering): (slave bridge2): Releasing active interface [ 508.182242][ T12] bond23 (unregistering): (slave bridge25): Releasing backup interface [ 508.206142][ T12] bond0 (unregistering): Released all slaves [ 508.230808][ T12] bond1 (unregistering): Released all slaves [ 508.264698][ T12] bond2 (unregistering): Released all slaves [ 508.298620][ T12] bond3 (unregistering): Released all slaves [ 508.321354][ T12] bond4 (unregistering): Released all slaves [ 508.348906][ T12] bond5 (unregistering): Released all slaves [ 508.379365][ T12] bond6 (unregistering): Released all slaves [ 508.392774][ T12] bond7 (unregistering): Released all slaves [ 508.405398][ T12] bond8 (unregistering): Released all slaves [ 508.436752][ T12] bond9 (unregistering): Released all slaves [ 508.449853][ T12] bond10 (unregistering): Released all slaves [ 508.461992][ T12] bond11 (unregistering): Released all slaves [ 508.475852][ T12] bond12 (unregistering): Released all slaves [ 508.501064][ T12] bond13 (unregistering): Released all slaves [ 508.510412][ T12] bond14 (unregistering): Released all slaves [ 508.524467][ T12] bond15 (unregistering): Released all slaves [ 508.562149][ T12] bond16 (unregistering): Released all slaves [ 508.574938][ T12] bond17 (unregistering): Released all slaves [ 508.589607][ T12] bond18 (unregistering): Released all slaves [ 508.601581][ T12] bond19 (unregistering): Released all slaves [ 508.610905][ T5617] Bluetooth: hci6: command 0x0406 tx timeout [ 508.616056][ T12] bond20 (unregistering): Released all slaves [ 508.673558][ T12] bond21 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 508.674402][ T12] bond21 (unregistering): Released all slaves [ 508.695110][ T12] bond22 (unregistering): Released all slaves [ 508.713350][ T12] bond23 (unregistering): Released all slaves [ 508.841500][T20784] __nla_validate_parse: 6 callbacks suppressed [ 508.841520][T20784] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3748'. [ 509.060636][ T12] tipc: Left network mode [ 509.157101][T20796] IPv6: NLM_F_CREATE should be specified when creating new route [ 509.387405][T20799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3752'. [ 509.413371][T20799] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.545309][T20799] bridge_slave_1 (unregistering): left allmulticast mode [ 509.545344][T20799] bridge_slave_1 (unregistering): left promiscuous mode [ 509.545423][T20799] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.630397][ T12] IPVS: stopping master sync thread 10669 ... [ 510.038103][T10616] net_ratelimit: 5 callbacks suppressed [ 510.038123][T10616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.117818][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.651157][T20837] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3761'. [ 510.971108][T20845] macvtap1: entered promiscuous mode [ 510.971311][T20845] macvtap1: entered allmulticast mode [ 510.971324][T20845] veth1_vlan: entered allmulticast mode [ 511.079971][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.157910][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.189947][T20859] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3768'. [ 511.380090][T20868] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3767'. [ 511.380115][T20868] netlink: 145 bytes leftover after parsing attributes in process `syz.2.3767'. [ 511.411321][T20868] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3767'. [ 511.580342][T20874] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 511.683485][T20878] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3771'. [ 511.822521][T20880] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.3774'. [ 511.822701][T20880] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 511.844007][T20882] netlink: 'syz.2.3773': attribute type 29 has an invalid length. [ 511.882179][T20883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3774'. [ 511.906187][T20880] 0ªX¹¦Dö»: entered allmulticast mode [ 512.004818][ T921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.127430][T10616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.204460][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.254695][T20887] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 512.254780][T20887] gretap1: entered promiscuous mode [ 512.254796][T20887] gretap1: entered allmulticast mode [ 512.411133][ T7068] IPVS: starting estimator thread 0... [ 512.508324][T20906] IPVS: using max 26 ests per chain, 62400 per kthread [ 512.892066][T20910] netlink: 'syz.0.3780': attribute type 4 has an invalid length. [ 512.892219][T20911] netlink: 'syz.0.3780': attribute type 4 has an invalid length. [ 512.946117][T20926] netlink: 'syz.5.3784': attribute type 1 has an invalid length. [ 512.974973][T20927] ip6t_rt: address list match requested but addrnr is 0 [ 513.158379][T10616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.238192][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.572629][ T12] hsr_slave_0: left promiscuous mode [ 513.573411][ T12] hsr_slave_1: left promiscuous mode [ 513.595826][ T12] veth1_macvtap: left promiscuous mode [ 513.595859][ T12] veth0_macvtap: left promiscuous mode [ 513.595944][ T12] veth1_vlan: left promiscuous mode [ 513.596017][ T12] veth0_vlan: left promiscuous mode [ 514.856941][T20962] __nla_validate_parse: 4 callbacks suppressed [ 514.856961][T20962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3789'. [ 514.995377][T20970] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3791'. [ 515.077934][ T25] net_ratelimit: 2 callbacks suppressed [ 515.077954][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.237710][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.315455][T20987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3793'. [ 515.317833][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.340033][T20987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.462972][T20987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.625875][T21000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3797'. [ 515.639919][T21004] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 515.662423][ T12] IPVS: stop unused estimator thread 0... [ 515.903838][T21009] ip6t_hbh: too many supported opts specified [ 516.169816][T21023] tipc: Enabling of bearer rejected, failed to enable media [ 516.281144][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.284685][T21029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3807'. [ 516.300173][T21027] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3805'. [ 516.320846][T21032] team_slave_1: Caught tx_queue_len zero misconfig [ 516.357707][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.451719][T21041] openvswitch: netlink: IP tunnel TTL not specified. [ 516.451749][T21041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.455875][T21044] openvswitch: netlink: IP tunnel TTL not specified. [ 516.455906][T21044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.611178][T21050] sch_fq: defrate 0 ignored. [ 516.624979][T21051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3811'. [ 516.736706][T21060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3811'. [ 516.783432][T21053] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3812'. [ 516.807362][T21064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3813'. [ 516.833005][T21066] netlink: 'syz.1.3814': attribute type 1 has an invalid length. [ 516.924756][T21066] bond2: entered promiscuous mode [ 516.925176][T21066] 8021q: adding VLAN 0 to HW filter on device bond2 [ 516.992692][T21069] 8021q: adding VLAN 0 to HW filter on device bond2 [ 516.993034][T21069] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 516.993052][T21069] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 517.057594][T21069] bond2: (slave ip6gre1): making interface the new active one [ 517.057660][T21069] ip6gre1: entered promiscuous mode [ 517.067761][T21069] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 517.317717][T10616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.467683][T21087] xt_TPROXY: Can be used only with -p tcp or -p udp [ 517.745939][T21113] netlink: 'syz.2.3825': attribute type 24 has an invalid length. [ 518.207159][ T7064] IPVS: starting estimator thread 0... [ 518.297485][T21140] IPVS: using max 27 ests per chain, 64800 per kthread [ 518.818845][T21164] netlink: 'syz.0.3838': attribute type 3 has an invalid length. [ 519.001119][T21163] veth3: entered promiscuous mode [ 519.001142][T21163] veth3: entered allmulticast mode [ 519.022769][T21172] xt_cgroup: no path or classid specified [ 519.078180][T21174] block nbd0: reconnected socket [ 519.079262][ T52] block nbd0: Receive control failed (result -107) [ 519.155413][T21170] netlink: 'syz.4.3839': attribute type 1 has an invalid length. [ 519.217872][T21184] Bluetooth: hci0: unsupported parameter 5161 [ 519.217892][T21184] Bluetooth: hci0: unsupported parameter 8192 [ 519.217904][T21184] Bluetooth: hci0: unsupported parameter 5161 [ 519.217916][T21184] Bluetooth: hci0: unsupported parameter 8192 [ 519.240951][T21170] bond2: entered promiscuous mode [ 519.241452][T21170] 8021q: adding VLAN 0 to HW filter on device bond2 [ 519.334853][T21178] 8021q: adding VLAN 0 to HW filter on device bond2 [ 519.349648][T21178] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 519.349671][T21178] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 519.381206][T21178] bond2: (slave xfrm1): making interface the new active one [ 519.381228][T21178] xfrm1: entered promiscuous mode [ 519.400733][T21178] bond2: (slave xfrm1): Enslaving as an active interface with an up link [ 519.410094][T21185] batman_adv: batadv0: Adding interface: syzkaller0 [ 519.410112][T21185] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.410140][T21185] batman_adv: batadv0: Interface activated: syzkaller0 [ 519.558379][T21181] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 519.600514][T21181] batman_adv: batadv0: Removing interface: syzkaller0 [ 519.645521][ T8347] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.645627][ T8347] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.645685][ T8347] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.645714][ T8347] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.071706][T21224] __nla_validate_parse: 7 callbacks suppressed [ 520.071726][T21224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3850'. [ 520.087275][T21223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3853'. [ 520.130254][T21223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3853'. [ 520.135115][T21223] net_ratelimit: 7 callbacks suppressed [ 520.135135][T21223] ip_tables: iptables: counters copy to user failed while replacing table [ 520.135541][T21223] C: renamed from lo (while UP) [ 520.138049][T21223] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 520.212913][T21229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3854'. [ 520.272738][T21228] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 520.315609][T21228] bond1 (unregistering): Released all slaves [ 520.476212][T21238] netlink: 'syz.4.3856': attribute type 39 has an invalid length. [ 520.503083][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.503330][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.524711][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.586768][T21245] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3858'. [ 520.690778][T21250] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3860'. [ 521.160960][ T921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.161234][T21275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3865'. [ 521.322179][T21287] openvswitch: netlink: IP tunnel attribute has 5385 unknown bytes. [ 521.322519][T21287] openvswitch: netlink: IP tunnel attribute has 5385 unknown bytes. [ 521.322756][T21287] openvswitch: netlink: IP tunnel attribute has 5385 unknown bytes. [ 521.325869][T21287] openvswitch: netlink: IP tunnel attribute has 5385 unknown bytes. [ 521.781967][T21294] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3870'. [ 522.298473][T21317] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3876'. [ 522.444622][T21324] sctp: [Deprecated]: syz.4.3880 (pid 21324) Use of int in max_burst socket option. [ 522.444622][T21324] Use struct sctp_assoc_value instead [ 522.495622][T21329] syz_tun: entered allmulticast mode [ 522.549756][T21332] sctp: [Deprecated]: syz.0.3882 (pid 21332) Use of struct sctp_assoc_value in delayed_ack socket option. [ 522.549756][T21332] Use struct sctp_sack_info instead [ 522.550553][T21332] netlink: 'syz.0.3882': attribute type 10 has an invalid length. [ 522.611212][T21332] team0: Port device dummy0 added [ 522.612585][T21328] syz_tun: left allmulticast mode [ 522.663892][T21332] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3882'. [ 522.712661][T21332] team0: Port device dummy0 removed [ 522.778119][T21344] Bluetooth: hci0: unsupported parameter 5135 [ 522.778140][T21344] Bluetooth: hci0: unsupported parameter 8192 [ 522.778151][T21344] Bluetooth: hci0: unsupported parameter 5135 [ 522.778162][T21344] Bluetooth: hci0: unsupported parameter 8192 [ 523.155778][T21367] netlink: 'syz.2.3891': attribute type 1 has an invalid length. [ 523.580122][T21388] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 523.580139][T21388] IPv6: NLM_F_CREATE should be set when creating new route [ 523.580178][T21388] IPv6: NLM_F_CREATE should be set when creating new route [ 523.580198][T21388] IPv6: NLM_F_CREATE should be set when creating new route [ 523.580692][T21388] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 523.663684][T21393] ip6gre0: Caught tx_queue_len zero misconfig [ 523.897456][T21404] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 523.898324][T21405] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 523.899015][T21404] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 523.968675][ T5617] Bluetooth: hci3: command 0x0406 tx timeout [ 524.221471][T21421] x_tables: duplicate underflow at hook 2 [ 524.337023][T21425] syzkaller0: entered promiscuous mode [ 524.337045][T21425] syzkaller0: entered allmulticast mode [ 525.195564][T21463] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 525.195590][T21463] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 525.353159][T21475] netlink: 'syz.1.3917': attribute type 28 has an invalid length. [ 525.353183][T21475] netlink: 'syz.1.3917': attribute type 3 has an invalid length. [ 525.353194][T21475] __nla_validate_parse: 9 callbacks suppressed [ 525.353205][T21475] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3917'. [ 525.357163][T21475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3917'. [ 525.380160][T21463] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 525.380178][T21463] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 525.490031][T21463] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 525.490053][T21463] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 525.718375][ C0] net_ratelimit: 22 callbacks suppressed [ 525.718400][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.720310][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.720494][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.724971][T21463] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 525.724994][T21463] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 525.941891][T21505] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 525.943711][T21505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3925'. [ 525.943741][T21505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3925'. [ 525.953377][T21500] block nbd0: NBD_DISCONNECT [ 525.953820][T21500] block nbd0: Send disconnect failed -32 [ 525.953839][T21500] block nbd0: shutting down sockets [ 526.036584][T21500] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3924'. [ 526.058684][T21463] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 526.058707][T21463] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 526.202522][T21510] batman_adv: batadv0: Adding interface: veth0 [ 526.202540][T21510] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.202567][T21510] batman_adv: batadv0: Interface activated: veth0 [ 526.277929][T21514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.277954][T21514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.311899][T21514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.311921][T21514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.322627][T21514] batman_adv: batadv0: Interface deactivated: veth0 [ 526.322647][T21514] batman_adv: batadv0: Removing interface: veth0 [ 526.757452][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.759258][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.759459][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.765032][T21537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3929'. [ 526.862040][T21542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.133731][T21558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3933'. [ 527.240083][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.667787][T21583] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3937'. [ 527.798224][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.800591][T10616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.860109][T21592] netlink: 'syz.4.3940': attribute type 75 has an invalid length. [ 528.258182][T21613] netlink: 'syz.5.3943': attribute type 21 has an invalid length. [ 528.318529][T21613] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 528.335091][T21613] bond1 (unregistering): Released all slaves [ 528.354674][T21620] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3944'. [ 529.072260][T21651] sctp: [Deprecated]: syz.1.3950 (pid 21651) Use of struct sctp_assoc_value in delayed_ack socket option. [ 529.072260][T21651] Use struct sctp_sack_info instead [ 529.072962][T21651] xt_ecn: cannot match TCP bits for non-tcp packets [ 529.220990][T21656] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3951'. [ 529.221017][T21656] nbd: must specify at least one socket [ 529.742452][T21670] Bluetooth: hci0: unsupported parameter 5161 [ 529.742472][T21670] Bluetooth: hci0: unsupported parameter 8192 [ 529.742484][T21670] Bluetooth: hci0: unsupported parameter 5161 [ 529.742496][T21670] Bluetooth: hci0: unsupported parameter 8192 [ 530.498574][T21697] netlink: 'syz.5.3959': attribute type 11 has an invalid length. [ 530.561412][T21699] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3960'. [ 530.566190][T21702] ip6tnl0: Caught tx_queue_len zero misconfig [ 530.724262][T21709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3964'. [ 530.724844][T21713] netlink: 'syz.4.3963': attribute type 1 has an invalid length. [ 530.749856][T21713] 8021q: adding VLAN 0 to HW filter on device bond3 [ 530.792995][T21709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3964'. [ 530.851073][T21721] netlink: 'syz.5.3965': attribute type 1 has an invalid length. [ 530.860802][T21713] bond3: (slave syz_tun): Enslaving as a backup interface with an up link [ 530.879000][T21709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3964'. [ 530.879234][T21709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3964'. [ 530.879455][T21709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3964'. [ 530.879712][T21709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3964'. [ 530.879922][T21709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3964'. [ 530.880158][T21709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3964'. [ 530.924939][ T5813] net_ratelimit: 8 callbacks suppressed [ 530.924958][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.925172][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.104035][T21709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3964'. [ 531.197419][T21723] bond1: (slave gretap1): making interface the new active one [ 531.205183][T21723] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 531.237338][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.301930][T21731] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 531.959199][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.959368][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.119486][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.120241][T21757] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 532.277429][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.525540][T21773] netlink: 'syz.1.3980': attribute type 10 has an invalid length. [ 532.542640][T21780] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 532.570665][T21777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.624857][T21777] tc_dump_action: action bad kind [ 532.705236][T21783] pimreg: left allmulticast mode [ 532.705342][T21783] dvmrp8: left allmulticast mode [ 532.803900][T21783] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 533.408942][T21809] netlink: 'syz.0.3990': attribute type 1 has an invalid length. [ 533.758666][T21820] vcan0: tx address claim with different name [ 534.148774][T21850] netlink: 'syz.2.4005': attribute type 6 has an invalid length. [ 534.206371][T21858] netlink: 'syz.2.4005': attribute type 6 has an invalid length. [ 534.966717][T21894] netlink: 'syz.1.4017': attribute type 21 has an invalid length. [ 535.557010][T21917] xt_nfacct: accounting object `syz0' does not exist [ 535.751893][T21927] __nla_validate_parse: 70 callbacks suppressed [ 535.751917][T21927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4023'. [ 535.786509][T21927] netlink: 'syz.1.4023': attribute type 1 has an invalid length. [ 535.952564][T21933] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4025'. [ 536.019970][T21933] bond0: entered allmulticast mode [ 536.021469][T21932] tipc: Enabling of bearer rejected, failed to enable media [ 536.021688][T21936] netlink: 292 bytes leftover after parsing attributes in process `syz.5.4026'. [ 536.122432][T10616] net_ratelimit: 13 callbacks suppressed [ 536.122452][T10616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.122626][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.306079][T21948] bond3: Removing last ns target with arp_interval on [ 536.437755][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.871345][T21956] syzkaller0: entered promiscuous mode [ 536.871369][T21956] syzkaller0: entered allmulticast mode [ 537.128481][T21995] netlink: 'syz.2.4039': attribute type 74 has an invalid length. [ 537.159349][T10616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.159525][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.477333][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.199154][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.199323][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.302965][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.517526][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.318637][T10616] net_ratelimit: 4 callbacks suppressed [ 541.318657][T10616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.318821][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.331516][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.570434][T22033] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4047'. [ 541.719362][ T7195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.744074][T22036] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4048'. [ 541.895481][T22045] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 541.895516][T22045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.929947][T22047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4052'. [ 542.363244][T10616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.363418][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.366172][T10616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.390053][T11135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.798092][T22072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4056'. [ 542.798945][T22072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4056'. [ 542.874674][T22078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4056'. [ 542.980134][T22081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4057'. [ 543.073745][T22087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4058'. [ 543.126693][T22075] netlink: 288 bytes leftover after parsing attributes in process `syz.2.4057'. [ 543.341448][T22096] xt_recent: Unsupported userspace flags (000000b1) [ 543.635784][T22113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4063'. [ 543.869801][T22113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 543.872176][T22113] bond0: (slave bond1): Enslaving as an active interface with an up link [ 544.424494][T22147] netlink: 'syz.0.4074': attribute type 1 has an invalid length. [ 544.709524][T22162] netlink: 'syz.1.4077': attribute type 1 has an invalid length. [ 544.739903][T22162] bond5: entered promiscuous mode [ 544.740345][T22162] 8021q: adding VLAN 0 to HW filter on device bond5 [ 544.779402][T22162] 8021q: adding VLAN 0 to HW filter on device bond5 [ 544.779773][T22162] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 544.779793][T22162] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 544.902351][T22162] bond5: (slave wireguard0): making interface the new active one [ 544.902376][T22162] wireguard0: entered promiscuous mode [ 544.903733][T22162] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 546.096581][T22225] netlink: 'syz.1.4093': attribute type 1 has an invalid length. [ 546.372682][T22234] net_ratelimit: 17 callbacks suppressed [ 546.372702][T22234] openvswitch: netlink: Key type 327 is out of range max 32 [ 546.520587][T10616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.520773][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.917472][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.288550][T22258] macvlan0: entered allmulticast mode [ 547.335542][T22257] __nla_validate_parse: 10 callbacks suppressed [ 547.335562][T22257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4103'. [ 547.363939][T22259] bridge0: entered allmulticast mode [ 547.558742][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.558917][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.764261][T22284] IPVS: set_ctl: invalid protocol: 33 172.30.0.2:20001 [ 547.856544][T22290] IPVS: set_ctl: invalid protocol: 33 172.30.0.2:20001 [ 547.957752][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.037135][T22295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4108'. [ 548.078485][T22295] gretap2: entered promiscuous mode [ 548.094325][T22302] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4109'. [ 548.251098][T22308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4112'. [ 548.439241][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.600185][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.600363][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.850947][T22337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4116'. [ 550.102136][T22359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4125'. [ 550.501882][T22365] 8021q: adding VLAN 0 to HW filter on device bond4 [ 550.562871][T22369] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 551.444272][T22400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4136'. [ 551.457092][T22400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4136'. [ 551.469469][T22405] net_ratelimit: 7 callbacks suppressed [ 551.469493][T22405] ip_tables: iptables: counters copy to user failed while replacing table [ 551.485871][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.505861][T22400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4136'. [ 551.506551][T22400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4136'. [ 551.510464][T22410] openvswitch: netlink: IPv4 tun info is not correct [ 551.718853][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.719020][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.872218][T22438] netlink: 'syz.4.4142': attribute type 2 has an invalid length. [ 552.000883][T22442] ipt_REJECT: ECHOREPLY no longer supported. [ 552.006323][T22433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 552.395309][T22451] Set syz1 is full, maxelem 2 reached [ 552.446874][T22455] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 552.487822][T22461] __nla_validate_parse: 30 callbacks suppressed [ 552.487841][T22461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4153'. [ 552.511203][ T31] audit: type=1107 audit(1790752718.603:6): pid=22460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 552.758937][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.759119][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.820103][T22483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4159'. [ 552.820125][T22483] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4159'. [ 553.240441][ T8347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.359758][T22509] netlink: 'syz.2.4166': attribute type 3 has an invalid length. [ 553.359779][T22509] netlink: 'syz.2.4166': attribute type 4 has an invalid length. [ 553.359792][T22509] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.4166'. [ 553.555980][T22525] netlink: 'syz.4.4169': attribute type 11 has an invalid length. [ 553.569665][T22527] dvmrp0: entered allmulticast mode [ 553.589746][T22526] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4170'. [ 553.617845][T22525] netlink: 'syz.4.4169': attribute type 11 has an invalid length. [ 553.638341][T22537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4172'. [ 553.638387][T22537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4172'. [ 553.705725][T22537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4172'. [ 553.781955][T22541] syzkaller0: entered promiscuous mode [ 553.781977][T22541] syzkaller0: entered allmulticast mode [ 553.804668][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.933806][T22545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4176'. [ 554.336078][T22559] netlink: 'syz.5.4180': attribute type 12 has an invalid length. [ 554.336101][T22559] netlink: 'syz.5.4180': attribute type 29 has an invalid length. [ 554.336113][T22559] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4180'. [ 554.336146][T22559] netlink: 'syz.5.4180': attribute type 1 has an invalid length. [ 554.336158][T22559] netlink: 'syz.5.4180': attribute type 2 has an invalid length. [ 554.683754][T22575] tipc: Failed to remove unknown binding: 66,0,0/0:3217429468/3217429469 [ 554.684115][T22575] tipc: Failed to remove unknown binding: 66,0,0/0:3217429468/3217429469 [ 554.762080][T22582] mac80211_hwsim hwsim50 wlan0: entered promiscuous mode [ 554.993620][T22596] bond2 (unregistering): Released all slaves [ 555.224290][T22611] netlink: 'syz.4.4194': attribute type 3 has an invalid length. [ 555.224317][T22611] NCSI netlink: No device for ifindex 813332851 [ 555.304071][T22599] syzkaller1: entered promiscuous mode [ 555.304096][T22599] syzkaller1: entered allmulticast mode [ 555.844576][T22650] ip6t_hbh: too many supported opts specified [ 556.922342][T10616] net_ratelimit: 12 callbacks suppressed [ 556.922362][T10616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.922530][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.966161][T22690] validate_nla: 3 callbacks suppressed [ 556.966179][T22690] netlink: 'syz.5.4208': attribute type 21 has an invalid length. [ 557.397555][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.433467][T22716] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 557.452488][T22716] bond2 (unregistering): Released all slaves [ 557.574764][ T921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.574950][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.762412][T22720] C speed is unknown, defaulting to 1000 [ 557.847380][T22746] nbd: nbd4 already in use [ 557.960412][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.960586][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.437381][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.559545][T22761] __nla_validate_parse: 14 callbacks suppressed [ 558.559566][T22761] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4225'. [ 558.673427][T22764] netlink: 'syz.2.4225': attribute type 1 has an invalid length. [ 559.006368][T10616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.006547][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.025289][T22720] lo speed is unknown, defaulting to 1000 [ 559.646515][T22783] veth5: entered allmulticast mode [ 559.678394][T22789] netlink: 'syz.2.4233': attribute type 10 has an invalid length. [ 559.678650][T22789] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.679322][T22789] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.719118][T22789] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.719245][T22789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.719536][T22789] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.719661][T22789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.722842][T22789] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 559.799901][T22791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4233'. [ 559.883790][T22791] bridge_slave_1: left allmulticast mode [ 559.883818][T22791] bridge_slave_1: left promiscuous mode [ 559.884042][T22791] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.887120][T22791] bridge_slave_0: left allmulticast mode [ 559.887144][T22791] bridge_slave_0: left promiscuous mode [ 559.889027][T22791] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.938802][T22791] bond0: (slave bridge0): Releasing backup interface [ 559.939870][T22791] bridge0 (unregistering): left allmulticast mode [ 559.978302][T22794] erspan0: entered promiscuous mode [ 560.015229][T22794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4235'. [ 560.309363][T22820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4241'. [ 560.522673][T22821] v: renamed from veth0_vlan [ 560.815991][T22834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4244'. [ 560.883506][T22845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4244'. [ 561.078077][T22834] gtp1: entered promiscuous mode [ 561.078099][T22834] gtp1: entered allmulticast mode [ 561.388132][T22855] xt_limit: Overflow, try lower: 536871034/0 [ 561.423693][T22857] xt_limit: Overflow, try lower: 536871034/0 [ 561.548750][T22863] netlink: 'syz.2.4249': attribute type 15 has an invalid length. [ 561.548773][T22863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4249'. [ 561.607750][T22863] netlink: 'syz.2.4249': attribute type 15 has an invalid length. [ 561.607772][T22863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4249'. [ 561.652624][T22870] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4250'. [ 561.728145][T22872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4252'. [ 562.048088][T22878] geneve0: entered allmulticast mode [ 562.119585][T10616] net_ratelimit: 13 callbacks suppressed [ 562.119605][T10616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.119811][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.376051][T22888] Cannot find map_set index 2 as target [ 562.405625][T22888] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 562.714689][ T5277] v: left promiscuous mode [ 562.759594][ T10] v: entered promiscuous mode [ 562.837458][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 563.122413][T22911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 563.166250][T10616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.166460][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.331918][T22919] netlink: Conntrack attr has 4 unknown bytes [ 563.331954][T22919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.648179][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.648418][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.734285][T22943] __nla_validate_parse: 1 callbacks suppressed [ 563.734306][T22943] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4266'. [ 563.834439][T22944] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4268'. [ 563.834465][T22944] netlink: 'syz.1.4268': attribute type 9 has an invalid length. [ 563.976225][T22948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4270'. [ 564.054963][T22959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4270'. [ 564.130836][T22951] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4269'. [ 564.201345][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.244872][T22970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4271'. [ 564.244895][T22970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4271'. [ 564.326503][T22977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4271'. [ 564.326528][T22977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4271'. [ 564.352612][T22978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4271'. [ 564.436862][T22983] netdevsim netdevsim2 : renamed from netdevsim0 [ 565.388500][T23018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.475737][T23018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.475742][T23019] tipc: Started in network mode [ 565.475771][T23019] tipc: Node identity 966951992894, cluster identity 4711 [ 565.477039][T23019] tipc: Enabled bearer , priority 0 [ 565.631427][T23018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.656333][T23019] syzkaller0: entered promiscuous mode [ 565.656358][T23019] syzkaller0: entered allmulticast mode [ 565.657030][T23019] tipc: Resetting bearer [ 565.692751][T23020] netlink: 'syz.5.4283': attribute type 3 has an invalid length. [ 565.842600][T23015] tipc: Resetting bearer [ 567.319089][ T9] net_ratelimit: 10 callbacks suppressed [ 567.319110][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.319309][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.626718][T23047] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 567.626718][T23046] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 567.904895][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.958107][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 568.929593][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.960793][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.011230][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.441062][T23015] tipc: Disabling bearer [ 571.462496][T10616] tipc: Node number set to 3204272537 [ 571.605937][T10616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.606159][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.699157][T23060] __nla_validate_parse: 9 callbacks suppressed [ 571.699177][T23060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4290'. [ 571.699398][T23061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4290'. [ 571.831097][T23062] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4291'. [ 571.945656][T23066] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4292'. [ 572.384469][T23096] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4302'. [ 572.468317][T23102] netlink: 'syz.1.4305': attribute type 2 has an invalid length. [ 572.512789][T23105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4304'. [ 572.512915][T23105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.671980][T23116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4304'. [ 572.723787][ T5813] net_ratelimit: 1 callbacks suppressed [ 572.723808][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.724014][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.766536][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.766749][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.790456][T23105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.796218][T23121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4304'. [ 573.082135][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.404911][T16475] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.405728][ T7064] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.405766][ T7064] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.405796][ T7064] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.507063][T23163] netlink: 'syz.5.4316': attribute type 1 has an invalid length. [ 573.595437][T23159] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4313'. [ 573.595501][T23159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4313'. [ 573.799134][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.799354][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.947973][T23192] netlink: 'syz.4.4318': attribute type 8 has an invalid length. [ 574.136545][T23195] x_tables: duplicate entry at hook 1 [ 574.146391][T23195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.146656][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.165402][T23195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.196034][T23171] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 574.571506][T23209] netlink: 'syz.4.4324': attribute type 1 has an invalid length. [ 574.703378][T23209] bond6: entered promiscuous mode [ 574.705678][T23209] 8021q: adding VLAN 0 to HW filter on device bond6 [ 574.819537][T23214] bond6: (slave bridge5): making interface the new active one [ 574.819564][T23214] bridge5: entered promiscuous mode [ 574.820841][T23214] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 575.008878][T23226] netlink: 'syz.1.4328': attribute type 1 has an invalid length. [ 575.060042][T23226] bond7: (slave veth0_to_bond): making interface the new active one [ 575.061514][T23226] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 575.090725][T23226] 8021q: adding VLAN 0 to HW filter on device bond7 [ 575.748459][T23251] netlink: 'syz.2.4335': attribute type 5 has an invalid length. [ 576.405141][T23276] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 576.411914][T23276] bond2 (unregistering): Released all slaves [ 577.423405][T23324] __nla_validate_parse: 10 callbacks suppressed [ 577.423426][T23324] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4351'. [ 577.495955][T23335] netlink: 277 bytes leftover after parsing attributes in process `syz.2.4353'. [ 577.649056][T23324] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4351'. [ 577.674851][T23324] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4351'. [ 577.693162][T23347] netlink: 193 bytes leftover after parsing attributes in process `syz.0.4352'. [ 577.693872][T23347] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4352'. [ 577.835933][T23339] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 577.856084][T23339] bond2 (unregistering): Released all slaves [ 577.972356][ T9] net_ratelimit: 17 callbacks suppressed [ 577.972375][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.972581][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.042873][T23324] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4351'. [ 578.091625][T23324] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4351'. [ 578.117688][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.474209][T23362] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4358'. [ 578.740902][T23375] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.4363'. [ 578.743382][T23375] siw: device registration error -23 [ 578.841252][T10608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.841708][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.961719][T23385] netlink: zone id is out of range [ 578.961776][T23385] netlink: zone id is out of range [ 578.961785][T23385] netlink: zone id is out of range [ 578.961813][T23385] netlink: zone id is out of range [ 578.961836][T23385] netlink: zone id is out of range [ 579.003303][T23385] netlink: 'syz.5.4365': attribute type 3 has an invalid length. [ 579.003858][T23385] netlink: 'syz.5.4365': attribute type 3 has an invalid length. [ 579.516199][T23406] netlink: 'syz.0.4372': attribute type 1 has an invalid length. [ 579.625188][T23411] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 580.295914][T23436] team0: Port device dummy0 removed [ 580.298742][T23436] bridge_slave_0: left allmulticast mode [ 580.298765][T23436] bridge_slave_0: left promiscuous mode [ 580.298959][T23436] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.337086][T23436] bond7: (slave veth0_to_bond): Releasing active interface [ 580.353371][T23436] bond0: (slave bond_slave_0): Releasing backup interface [ 580.361195][T23436] bond0: (slave bond_slave_1): Releasing backup interface [ 580.380331][T23436] team0: Port device team_slave_0 removed [ 580.384778][T23436] team0: Port device team_slave_1 removed [ 580.576461][T23447] IPv6: Can't replace route, no match found [ 581.629250][T23494] syzkaller0: entered promiscuous mode [ 581.629273][T23494] syzkaller0: entered allmulticast mode [ 582.012034][T23508] xt_ecn: cannot match TCP bits for non-tcp packets [ 582.570998][T23540] __nla_validate_parse: 15 callbacks suppressed [ 582.571020][T23540] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4413'. [ 582.571046][T23540] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4413'. [ 583.159378][T10616] net_ratelimit: 31 callbacks suppressed [ 583.159400][T10616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.159595][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.321385][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.198276][T10616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.198485][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.931979][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.932218][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.238293][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.238501][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.241328][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.358274][ T9] net_ratelimit: 9 callbacks suppressed [ 588.358294][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.358480][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.927681][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.399629][T10616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.399826][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.967345][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.440051][T11139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.440266][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.008583][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.009436][ T8330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.042108][ T5725] net_ratelimit: 4 callbacks suppressed [ 594.042153][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.042594][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.117336][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.482101][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.482626][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.124898][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.760653][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.089058][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.089622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.167442][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.237590][ C1] net_ratelimit: 1 callbacks suppressed [ 599.237618][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.131036][ T921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.133484][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.287346][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.603846][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.604024][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.327337][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.357741][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.528342][T11135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.167871][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.798717][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 604.447443][ C1] net_ratelimit: 2 callbacks suppressed [ 604.447490][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.644334][T16475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.644543][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.197783][ T921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.198281][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.015795][T23562] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4421'. [ 607.023821][T23560] ip_tables: iptables: counters copy to user failed while replacing table [ 607.085334][T23557] bond8: entered allmulticast mode [ 607.096008][T23557] 8021q: adding VLAN 0 to HW filter on device bond8 [ 607.116416][T23565] pim6reg: entered allmulticast mode [ 607.148870][T23561] netlink: 'syz.2.4419': attribute type 5 has an invalid length. [ 607.149198][T23561] netlink: 'syz.2.4419': attribute type 21 has an invalid length. [ 607.149215][T23561] IPv6: NLM_F_CREATE should be specified when creating new route [ 607.669989][T11135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.284213][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.521765][T23567] pim6reg: left allmulticast mode [ 608.683814][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.822991][T23601] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4429'. [ 609.238636][T10608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.246600][T23613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4434'. [ 609.246623][T23613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4434'. [ 609.294925][T23617] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4435'. [ 609.296940][T23617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4435'. [ 609.707010][T23643] netlink: 'syz.2.4442': attribute type 1 has an invalid length. [ 609.707035][T23643] netlink: 'syz.2.4442': attribute type 2 has an invalid length. [ 609.717725][ C1] net_ratelimit: 1 callbacks suppressed [ 609.717747][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.846323][T23648] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4446'. [ 609.852161][T23646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4445'. [ 609.852183][T23646] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4445'. [ 609.855941][T23646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4445'. [ 610.064762][T23660] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 610.711631][T23688] C speed is unknown, defaulting to 1000 [ 610.764846][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.870659][T23695] x_tables: duplicate underflow at hook 1 [ 610.977772][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88804486a800: rx timeout, send abort [ 611.329005][T23688] lo speed is unknown, defaulting to 1000 [ 611.380151][T23713] batadv_slave_0: Caught tx_queue_len zero misconfig [ 611.477920][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88804486b800: rx timeout, send abort [ 611.477960][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88804486a800: abort rx timeout. Force session deactivation [ 611.483516][T16475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.483704][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.801991][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.977973][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88804486b800: abort rx timeout. Force session deactivation [ 612.108995][T23737] __nla_validate_parse: 11 callbacks suppressed [ 612.109014][T23737] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4470'. [ 612.109026][T23737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4470'. [ 612.287556][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.287764][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.321856][T23743] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4473'. [ 612.321880][T23743] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4473'. [ 612.333747][T23743] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4473'. [ 612.837987][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.154917][T23773] ip_tables: iptables: counters copy to user failed while replacing table [ 613.166150][T23782] openvswitch: netlink: Missing valid actions attribute. [ 613.171690][T23782] netlink: 'syz.2.4483': attribute type 1 has an invalid length. [ 613.635983][T23794] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4488'. [ 613.775860][T23798] netlink: 'syz.5.4489': attribute type 1 has an invalid length. [ 613.775884][T23798] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4489'. [ 613.869172][T23776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4481'. [ 613.902100][T23805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4491'. [ 614.381092][T23824] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4497'. [ 614.516415][T23835] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 614.519870][T23836] netlink: 'syz.1.4498': attribute type 12 has an invalid length. [ 614.623736][T23841] netlink: 'syz.5.4502': attribute type 2 has an invalid length. [ 614.656183][T23841] : entered promiscuous mode [ 614.927350][ C1] net_ratelimit: 29 callbacks suppressed [ 614.927404][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.323243][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.323430][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.366751][T23874] netlink: 'syz.2.4513': attribute type 1 has an invalid length. [ 615.957666][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.340871][T23914] Bluetooth: MGMT ver 1.23 [ 616.437389][T23917] syzkaller0: entered promiscuous mode [ 616.437413][T23917] syzkaller0: entered allmulticast mode [ 616.612435][T23924] netlink: 'syz.4.4526': attribute type 39 has an invalid length. [ 616.674091][T23928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.675094][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.242607][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.242909][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.269365][T23944] __nla_validate_parse: 9 callbacks suppressed [ 617.269385][T23944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4534'. [ 617.269398][T23944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4534'. [ 618.163676][T23959] netlink: 'syz.1.4536': attribute type 4 has an invalid length. [ 618.373909][ T921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.375956][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.514204][T23944] vlan0: entered promiscuous mode [ 620.597526][ C1] net_ratelimit: 3 callbacks suppressed [ 620.597567][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.714917][T23972] vlan0: entered promiscuous mode [ 620.715200][T23972] vlan0: entered allmulticast mode [ 620.715213][T23972] veth0_vlan: entered allmulticast mode [ 620.756091][T23977] netlink: 198796 bytes leftover after parsing attributes in process `syz.5.4538'. [ 620.756115][T23977] netlink: 'syz.5.4538': attribute type 2 has an invalid length. [ 620.756540][T23978] netlink: 198796 bytes leftover after parsing attributes in process `syz.5.4538'. [ 620.756555][T23978] netlink: 'syz.5.4538': attribute type 2 has an invalid length. [ 620.798048][T23973] netlink: 'syz.0.4540': attribute type 1 has an invalid length. [ 620.798066][T23973] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4540'. [ 620.844875][T23977] netlink: 'syz.5.4538': attribute type 1 has an invalid length. [ 620.966221][T23987] x_tables: ip6_tables: ecn.0 match: invalid size 8 (kernel) != (user) 48 [ 621.043327][T23989] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4543'. [ 621.148027][T23992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4541'. [ 621.203976][T23994] IPv6: NLM_F_CREATE should be specified when creating new route [ 621.287526][T23996] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 621.310648][T24001] syzkaller0: entered promiscuous mode [ 621.310669][T24001] syzkaller0: entered allmulticast mode [ 621.401356][ T921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.401558][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.417846][T24000] syzkaller0: entered promiscuous mode [ 621.417867][T24000] syzkaller0: entered allmulticast mode [ 621.425932][T24000] FAULT_INJECTION: forcing a failure. [ 621.425932][T24000] name failslab, interval 1, probability 0, space 0, times 1 [ 621.425962][T24000] CPU: 1 UID: 0 PID: 24000 Comm: syz.1.4547 Not tainted syzkaller #0 PREEMPT(full) [ 621.425982][T24000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 621.425993][T24000] Call Trace: [ 621.426001][T24000] [ 621.426008][T24000] dump_stack_lvl+0xe8/0x150 [ 621.426040][T24000] should_fail_ex+0x410/0x560 [ 621.426066][T24000] should_failslab+0xa8/0x100 [ 621.426088][T24000] ? skb_clone+0x212/0x3a0 [ 621.426113][T24000] kmem_cache_alloc_noprof+0xa1/0x600 [ 621.426143][T24000] ? skb_clone+0x212/0x3a0 [ 621.426174][T24000] skb_clone+0x212/0x3a0 [ 621.426198][T24000] ? netem_enqueue+0xeb8/0x32b0 [ 621.426226][T24000] netem_enqueue+0xecb/0x32b0 [ 621.426254][T24000] ? do_raw_spin_lock+0x12b/0x2f0 [ 621.426289][T24000] dev_qdisc_enqueue+0x4e/0x260 [ 621.426308][T24000] ? __dev_queue_xmit+0x1b2b/0x3820 [ 621.426338][T24000] __dev_queue_xmit+0x1b45/0x3820 [ 621.426378][T24000] ? __dev_queue_xmit+0x29b/0x3820 [ 621.426409][T24000] ? _copy_from_iter+0x21b/0x1660 [ 621.426427][T24000] ? skb_set_owner_w+0x263/0x3d0 [ 621.426454][T24000] ? __pfx___dev_queue_xmit+0x10/0x10 [ 621.426488][T24000] ? virtio_net_hdr_to_skb+0xab3/0x1660 [ 621.426529][T24000] ? __pfx_virtio_net_hdr_to_skb+0x10/0x10 [ 621.426556][T24000] ? packet_xmit+0x68/0x330 [ 621.426575][T24000] ? skb_put+0x112/0x210 [ 621.426601][T24000] packet_sendmsg+0x3e99/0x5150 [ 621.426641][T24000] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 621.426669][T24000] ? __lock_acquire+0x747/0x2de0 [ 621.426699][T24000] ? __lock_acquire+0x747/0x2de0 [ 621.426723][T24000] ? kstrtouint+0x6e/0xe0 [ 621.426748][T24000] ? __pfx_packet_sendmsg+0x10/0x10 [ 621.426765][T24000] ? aa_sk_perm+0x713/0x900 [ 621.426792][T24000] ? percpu_up_write+0x8d/0x1c0 [ 621.426817][T24000] ? __pfx_aa_sk_perm+0x10/0x10 [ 621.426841][T24000] ? aa_sock_msg_perm+0x144/0x210 [ 621.426868][T24000] ? apparmor_socket_sendmsg+0x98/0x360 [ 621.426891][T24000] ? __pfx_packet_sendmsg+0x10/0x10 [ 621.426910][T24000] sock_sendmsg_nosec+0x13a/0x180 [ 621.426932][T24000] __sys_sendto+0x408/0x5a0 [ 621.426954][T24000] ? ksys_write+0x1e6/0x270 [ 621.426983][T24000] ? __pfx___sys_sendto+0x10/0x10 [ 621.427003][T24000] ? __mutex_unlock_slowpath+0x731/0x900 [ 621.427058][T24000] ? __pfx_ksys_write+0x10/0x10 [ 621.427088][T24000] __x64_sys_sendto+0xde/0x100 [ 621.427114][T24000] do_syscall_64+0x166/0x520 [ 621.427137][T24000] ? trace_irq_disable+0x3b/0x140 [ 621.427155][T24000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.427172][T24000] ? clear_bhb_loop+0x70/0xc0 [ 621.427194][T24000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.427212][T24000] RIP: 0033:0x7f085279e159 [ 621.427230][T24000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.427244][T24000] RSP: 002b:00007f0853619028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 621.427264][T24000] RAX: ffffffffffffffda RBX: 00007f0852a25fa0 RCX: 00007f085279e159 [ 621.427277][T24000] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000005 [ 621.427288][T24000] RBP: 00007f0853619090 R08: 0000200000000140 R09: 0000000000000014 [ 621.427300][T24000] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 621.427311][T24000] R13: 00007f0852a26038 R14: 00007f0852a25fa0 R15: 00007ffff263f848 [ 621.427342][T24000] [ 621.643463][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.838814][T24011] netlink: 'syz.5.4550': attribute type 1 has an invalid length. [ 621.907856][T24011] bond2: entered promiscuous mode [ 621.909000][T24011] 8021q: adding VLAN 0 to HW filter on device bond2 [ 621.910539][T24014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.910559][T24014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.001933][T24021] ip_tables: iptables: counters copy to user failed while replacing table [ 622.031454][T24017] ipvlan2: entered allmulticast mode [ 622.031476][T24017] bond2: entered allmulticast mode [ 622.092614][T24011] bond2: (slave bridge7): making interface the new active one [ 622.092638][T24011] bridge7: entered promiscuous mode [ 622.092802][T24011] bridge7: entered allmulticast mode [ 622.111115][T24011] bond2: (slave bridge7): Enslaving as an active interface with an up link [ 622.111446][T24022] syzkaller0: entered promiscuous mode [ 622.111462][T24022] syzkaller0: entered allmulticast mode [ 622.373249][T24026] tipc: New replicast peer: 172.20.20.187 [ 622.373514][T24026] tipc: Enabled bearer , priority 10 [ 622.684725][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.783151][T24058] netlink: 'syz.0.4561': attribute type 1 has an invalid length. [ 622.823629][T24063] syzkaller0: entered promiscuous mode [ 622.823651][T24063] syzkaller0: entered allmulticast mode [ 622.999752][T11135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.999954][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.023629][T24069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4565'. [ 623.023649][T24069] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4565'. [ 623.023850][T24069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4565'. [ 623.023862][T24069] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4565'. [ 623.236293][T24072] ip_tables: iptables: counters copy to user failed while replacing table [ 624.188983][T24110] netlink: 'syz.2.4572': attribute type 28 has an invalid length. [ 624.189007][T24110] netlink: 'syz.2.4572': attribute type 3 has an invalid length. [ 624.189020][T24110] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4572'. [ 624.229103][T24111] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4571'. [ 624.229132][T24111] block nbd0: not configured, cannot reconfigure [ 624.332254][T24111] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4571'. [ 624.441802][T24120] geneve4: entered allmulticast mode [ 624.578165][T24125] syzkaller0: entered promiscuous mode [ 624.578187][T24125] syzkaller0: entered allmulticast mode [ 624.581683][T24129] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4579'. [ 624.585617][T24129] syzkaller0: entered promiscuous mode [ 624.585635][T24129] syzkaller0: entered allmulticast mode [ 624.638754][T24133] syzkaller0: entered promiscuous mode [ 624.638774][T24133] syzkaller0: entered allmulticast mode [ 624.642364][T24133] FAULT_INJECTION: forcing a failure. [ 624.642364][T24133] name failslab, interval 1, probability 0, space 0, times 0 [ 624.642391][T24133] CPU: 0 UID: 0 PID: 24133 Comm: syz.5.4577 Not tainted syzkaller #0 PREEMPT(full) [ 624.642410][T24133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 624.642420][T24133] Call Trace: [ 624.642427][T24133] [ 624.642436][T24133] dump_stack_lvl+0xe8/0x150 [ 624.642467][T24133] should_fail_ex+0x410/0x560 [ 624.642495][T24133] should_failslab+0xa8/0x100 [ 624.642518][T24133] ? skb_clone+0x212/0x3a0 [ 624.642545][T24133] kmem_cache_alloc_noprof+0xa1/0x600 [ 624.642570][T24133] ? lock_acquire+0x115/0x350 [ 624.642590][T24133] ? skb_clone+0x212/0x3a0 [ 624.642621][T24133] skb_clone+0x212/0x3a0 [ 624.642644][T24133] ? dev_queue_xmit_nit+0x25c/0xac0 [ 624.642671][T24133] dev_queue_xmit_nit+0x28d/0xac0 [ 624.642694][T24133] ? dev_queue_xmit_nit+0x2d/0xac0 [ 624.642722][T24133] dev_hard_start_xmit+0x1c1/0x830 [ 624.642764][T24133] sch_direct_xmit+0x257/0x4c0 [ 624.642793][T24133] ? __pfx_sch_direct_xmit+0x10/0x10 [ 624.642814][T24133] ? seqcount_lockdep_reader_access+0xea/0x100 [ 624.642834][T24133] ? ktime_get+0x1f5/0x220 [ 624.642854][T24133] __qdisc_run+0xb11/0x1620 [ 624.642895][T24133] __dev_queue_xmit+0x1c05/0x3820 [ 624.642932][T24133] ? __dev_queue_xmit+0x29b/0x3820 [ 624.642960][T24133] ? _copy_from_iter+0x21b/0x1660 [ 624.642979][T24133] ? skb_set_owner_w+0x263/0x3d0 [ 624.643005][T24133] ? __pfx___dev_queue_xmit+0x10/0x10 [ 624.643040][T24133] ? virtio_net_hdr_to_skb+0xab3/0x1660 [ 624.643078][T24133] ? __pfx_virtio_net_hdr_to_skb+0x10/0x10 [ 624.643103][T24133] ? packet_xmit+0x68/0x330 [ 624.643122][T24133] ? skb_put+0x112/0x210 [ 624.643147][T24133] packet_sendmsg+0x3e99/0x5150 [ 624.643184][T24133] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 624.643212][T24133] ? __lock_acquire+0x747/0x2de0 [ 624.643242][T24133] ? __lock_acquire+0x747/0x2de0 [ 624.643264][T24133] ? kstrtouint+0x6e/0xe0 [ 624.643289][T24133] ? __pfx_packet_sendmsg+0x10/0x10 [ 624.643307][T24133] ? aa_sk_perm+0x713/0x900 [ 624.643334][T24133] ? percpu_up_write+0x8d/0x1c0 [ 624.643367][T24133] ? __pfx_aa_sk_perm+0x10/0x10 [ 624.643391][T24133] ? aa_sock_msg_perm+0x144/0x210 [ 624.643419][T24133] ? apparmor_socket_sendmsg+0x98/0x360 [ 624.643438][T24133] ? __pfx_packet_sendmsg+0x10/0x10 [ 624.643457][T24133] sock_sendmsg_nosec+0x13a/0x180 [ 624.643480][T24133] __sys_sendto+0x408/0x5a0 [ 624.643500][T24133] ? ksys_write+0x1e6/0x270 [ 624.643526][T24133] ? __pfx___sys_sendto+0x10/0x10 [ 624.643542][T24133] ? __mutex_unlock_slowpath+0x731/0x900 [ 624.643583][T24133] ? __pfx_ksys_write+0x10/0x10 [ 624.643611][T24133] __x64_sys_sendto+0xde/0x100 [ 624.643633][T24133] do_syscall_64+0x166/0x520 [ 624.643655][T24133] ? trace_irq_disable+0x3b/0x140 [ 624.643673][T24133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.643692][T24133] ? clear_bhb_loop+0x70/0xc0 [ 624.643713][T24133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.643730][T24133] RIP: 0033:0x7f007ab9e159 [ 624.643747][T24133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.643761][T24133] RSP: 002b:00007f007ba14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 624.643780][T24133] RAX: ffffffffffffffda RBX: 00007f007ae25fa0 RCX: 00007f007ab9e159 [ 624.643792][T24133] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000005 [ 624.643802][T24133] RBP: 00007f007ba14090 R08: 0000200000000140 R09: 0000000000000014 [ 624.643814][T24133] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 624.643825][T24133] R13: 00007f007ae26038 R14: 00007f007ae25fa0 R15: 00007ffd7abdbfc8 [ 624.643856][T24133] [ 624.674082][T24134] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4578'. [ 625.283928][T24150] netlink: 'syz.5.4582': attribute type 1 has an invalid length. [ 625.412312][T24159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4584'. [ 625.452715][T24150] bond3: entered promiscuous mode [ 625.455051][T24150] 8021q: adding VLAN 0 to HW filter on device bond3 [ 625.629328][T24157] ipvlan3: entered allmulticast mode [ 625.629350][T24157] bond3: entered allmulticast mode [ 625.662067][T24162] bond3: (slave bridge8): making interface the new active one [ 625.662093][T24162] bridge8: entered promiscuous mode [ 625.662257][T24162] bridge8: entered allmulticast mode [ 625.681985][T24162] bond3: (slave bridge8): Enslaving as an active interface with an up link [ 625.799831][T24175] syzkaller0: entered promiscuous mode [ 625.799853][T24175] syzkaller0: entered allmulticast mode [ 625.805092][ C1] net_ratelimit: 7 callbacks suppressed [ 625.805112][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.894935][T24185] netlink: 'syz.0.4592': attribute type 30 has an invalid length. [ 626.847553][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.481401][T10608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.481887][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.627569][T24209] netlink: 'syz.0.4599': attribute type 83 has an invalid length. [ 628.664399][T24209] __nla_validate_parse: 1 callbacks suppressed [ 628.664420][T24209] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4599'. [ 628.765299][T11133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.765558][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.824111][T24213] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 628.864158][T24213] bond7 (unregistering): Released all slaves [ 629.109146][T24231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4605'. [ 629.112178][T24210] ip_tables: iptables: counters copy to user failed while replacing table [ 629.302750][T24233] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 629.303148][T24233] gretap3: entered promiscuous mode [ 629.303164][T24233] gretap3: entered allmulticast mode [ 629.500251][T24245] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4610'. [ 629.781835][T24256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4613'. [ 629.924138][T24266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4619'. [ 629.924161][T24266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4619'. [ 629.924182][T24266] netlink: 'syz.1.4619': attribute type 14 has an invalid length. [ 629.924194][T24266] netlink: 'syz.1.4619': attribute type 13 has an invalid length. [ 630.115698][T24285] ip6t_srh: unknown srh invflags 4000 [ 630.359775][T24293] tipc: Enabled bearer , priority 1 [ 630.372549][T24292] tipc: Resetting bearer [ 630.459730][T24292] tipc: Disabling bearer [ 630.521675][T10608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.521896][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.565293][T24307] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4625'. [ 630.658160][T24311] netlink: 'syz.1.4628': attribute type 1 has an invalid length. [ 630.702012][T11141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.075061][T24331] netlink: 65019 bytes leftover after parsing attributes in process `syz.4.4633'. [ 631.214030][T24338] gre4: entered promiscuous mode [ 631.214054][T24338] gre4: entered allmulticast mode [ 632.285246][T24355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4641'. [ 632.330107][T24398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 632.340436][T24355] netlink: 'syz.2.4641': attribute type 3 has an invalid length. [ 632.340456][T24355] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4641'. [ 632.689370][T24415] netlink: 'syz.4.4656': attribute type 7 has an invalid length. [ 632.689394][T24415] netlink: 'syz.4.4656': attribute type 8 has an invalid length. [ 632.711586][T24415] syz_tun: entered promiscuous mode [ 632.711747][T24415] syz_tun: left promiscuous mode [ 633.470029][T24442] syzkaller0: entered promiscuous mode [ 633.470050][T24442] syzkaller0: entered allmulticast mode [ 633.579557][T10608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.579815][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.883274][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.883482][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.026106][T24470] __nla_validate_parse: 6 callbacks suppressed [ 634.026126][T24470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4674'. [ 634.082710][T24481] netlink: 'syz.4.4678': attribute type 10 has an invalid length. [ 634.129831][T24481] team0: Port device dummy0 added [ 634.372158][T24488] syzkaller0: entered promiscuous mode [ 634.372178][T24488] syzkaller0: entered allmulticast mode [ 634.614717][T24506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4685'. [ 634.752378][T24512] syzkaller1: entered promiscuous mode [ 634.752403][T24512] syzkaller1: entered allmulticast mode [ 635.082264][T24530] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4691'. [ 635.449912][T24547] netlink: 'syz.0.4696': attribute type 15 has an invalid length. [ 635.738008][T24567] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 635.755992][T24562] team0: Device xfrm0 is of different type [ 635.808609][T11133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.911032][T24567] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4701'. [ 635.915406][T24577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4705'. [ 636.036040][T24586] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4704'. [ 636.229109][T24595] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4707'. [ 636.229132][T24595] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4707'. [ 636.360381][T24598] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4708'. [ 636.527436][T24607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4712'. [ 636.598117][T10608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.598372][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.966006][T24631] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 637.538442][T24669] netlink: 'syz.0.4732': attribute type 9 has an invalid length. [ 637.626192][T24680] netlink: 'syz.1.4736': attribute type 1 has an invalid length. [ 637.688231][T24680] bond12: entered promiscuous mode [ 637.688305][T24680] bond12: entered allmulticast mode [ 637.688650][T24680] 8021q: adding VLAN 0 to HW filter on device bond12 [ 637.763243][T24685] erspan1: entered allmulticast mode [ 637.791090][T24685] bond12: (slave erspan1): making interface the new active one [ 637.791113][T24685] erspan1: entered promiscuous mode [ 637.792205][T24685] bond12: (slave erspan1): Enslaving as an active interface with an up link [ 637.794187][T24680] netlink: 'syz.1.4736': attribute type 10 has an invalid length. [ 637.879291][T24680] team0: Port device dummy0 added [ 638.024997][T24695] geneve5: entered allmulticast mode [ 638.533726][T24734] openvswitch: netlink: Multiple metadata blocks provided [ 638.665837][T24738] xt_hashlimit: overflow, try lower: 3/0 [ 639.111220][T24756] __nla_validate_parse: 6 callbacks suppressed [ 639.111241][T24756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4753'. [ 639.114497][T24766] netlink: 'syz.1.4754': attribute type 1 has an invalid length. [ 639.114517][T24766] netlink: 'syz.1.4754': attribute type 2 has an invalid length. [ 639.119905][T24766] netlink: 'syz.1.4754': attribute type 1 has an invalid length. [ 639.119924][T24766] netlink: 'syz.1.4754': attribute type 2 has an invalid length. [ 639.318362][T24769] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 639.406737][T24776] netlink: 'syz.4.4758': attribute type 1 has an invalid length. [ 639.406759][T24776] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4758'. [ 639.406774][T24776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4758'. [ 639.572542][T24788] netlink: 'syz.4.4760': attribute type 10 has an invalid length. [ 639.574549][T24788] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.575193][T24788] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.609755][T24788] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.609893][T24788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.610185][T24788] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.611988][T24788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.642897][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.643095][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.654116][T11138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.654307][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.673028][T24789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4760'. [ 639.710335][T24788] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 639.731927][T24789] bridge_slave_1: left allmulticast mode [ 639.731955][T24789] bridge_slave_1: left promiscuous mode [ 639.732184][T24789] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.756875][T24793] netlink: 'syz.2.4762': attribute type 1 has an invalid length. [ 639.775918][T24789] bridge_slave_0: left allmulticast mode [ 639.775946][T24789] bridge_slave_0: left promiscuous mode [ 639.776145][T24789] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.822254][T24789] bond0: (slave bridge0): Releasing backup interface [ 639.898883][T24808] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 640.114228][T24818] openvswitch: netlink: Missing key (keys=40, expected=100) [ 640.407818][ T9] lo speed is unknown, defaulting to 1000 [ 640.407843][ T9] syz2: Port: 1 Link DOWN [ 640.418253][ T9] lo speed is unknown, defaulting to 1000 [ 640.900940][T24843] bond6: entered promiscuous mode [ 640.902187][T24843] 8021q: adding VLAN 0 to HW filter on device bond6 [ 640.950536][T24850] bond6: (slave bridge0): making interface the new active one [ 640.950560][T24850] bridge0: entered promiscuous mode [ 640.953134][T24850] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 641.008622][T24844] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 641.415572][T24876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4777'. [ 641.442194][T24873] openvswitch: netlink: IP tunnel dst address not specified [ 641.442227][T24873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 641.681482][T24899] C: renamed from lo [ 641.688589][T24899] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 641.793185][T24902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4782'. [ 642.643373][T24948] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4796'. [ 642.672699][T24948] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4796'. [ 642.746690][T24952] geneve3: entered promiscuous mode [ 642.746714][T24952] geneve3: entered allmulticast mode [ 642.760282][ T12] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 642.760326][ T12] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 642.760358][ T12] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 642.760389][ T12] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 642.885398][T24954] validate_nla: 2 callbacks suppressed [ 642.885419][T24954] netlink: 'syz.5.4797': attribute type 1 has an invalid length. [ 642.941895][T24954] bond4: entered promiscuous mode [ 642.942415][T24954] 8021q: adding VLAN 0 to HW filter on device bond4 [ 643.075260][T24954] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 643.076259][T24955] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 643.225707][T24955] macvtap1: entered allmulticast mode [ 643.291104][T24966] bond4: (slave bridge9): making interface the new active one [ 643.291127][T24966] bridge9: entered promiscuous mode [ 643.322114][T24966] bond4: (slave bridge9): Enslaving as an active interface with an up link [ 643.474767][T24972] bond4: (slave bridge10): Enslaving as a backup interface with an up link [ 643.543329][T24974] ip6t_hbh: unknown flags 38 [ 643.804642][T24986] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4806'. [ 643.829859][T24988] netlink: 'syz.4.4807': attribute type 4 has an invalid length. [ 643.829879][T24988] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4807'. [ 643.833138][T24988] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 644.120115][T25001] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4811'. [ 644.142921][T25001] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4811'. [ 644.163331][T25009] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4813'. [ 644.207580][T25006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4813'. [ 644.313466][T25018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4815'. [ 644.420540][T25019] IPVS: stopping master sync thread 21004 ... [ 644.583138][T25023] netlink: 'syz.0.4817': attribute type 18 has an invalid length. [ 644.583161][T25023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4817'. [ 644.674472][T25023] netlink: 'syz.0.4817': attribute type 18 has an invalid length. [ 644.674494][T25023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4817'. [ 644.728715][T25028] netlink: 'syz.5.4819': attribute type 1 has an invalid length. [ 644.780159][T25028] 8021q: adding VLAN 0 to HW filter on device bond5 [ 644.807233][T25040] ip6gre3: entered allmulticast mode [ 644.886639][T25041] bond5: (slave geneve2): making interface the new active one [ 644.888187][T25041] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 644.894238][T25035] syzkaller1: entered allmulticast mode [ 644.898544][T25049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4821'. [ 645.165210][T25057] netlink: 'syz.2.4825': attribute type 83 has an invalid length. [ 645.281734][T25064] netlink: 'syz.2.4828': attribute type 1 has an invalid length. [ 645.320199][T25064] bond7: entered promiscuous mode [ 645.320619][T25064] 8021q: adding VLAN 0 to HW filter on device bond7 [ 645.331845][T25065] ipvlan2: entered allmulticast mode [ 645.331864][T25065] bond7: entered allmulticast mode [ 645.378998][T25064] bond7: (slave bridge33): making interface the new active one [ 645.379021][T25064] bridge33: entered promiscuous mode [ 645.379167][T25064] bridge33: entered allmulticast mode [ 645.382092][T25064] bond7: (slave bridge33): Enslaving as an active interface with an up link [ 645.489012][T25072] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4830'. [ 645.505380][T25070] netlink: 'syz.0.4827': attribute type 11 has an invalid length. [ 645.669444][T25075] syzkaller0: entered promiscuous mode [ 645.669467][T25075] syzkaller0: entered allmulticast mode [ 645.912753][T25090] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4833'. [ 646.285633][T25114] xt_ecn: cannot match TCP bits for non-tcp packets [ 646.339462][T25118] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 646.470189][T25127] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 646.497841][T25124] netlink: 'syz.2.4842': attribute type 3 has an invalid length. [ 646.570840][T25124] netlink: 'syz.2.4842': attribute type 3 has an invalid length. [ 647.340817][T25179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 647.505368][T25187] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 647.636481][T25193] syzkaller0: entered promiscuous mode [ 647.636504][T25193] syzkaller0: entered allmulticast mode [ 648.415797][T25233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 649.298276][T25266] __nla_validate_parse: 9 callbacks suppressed [ 649.298335][T25266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4866'. [ 649.298901][T25266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4866'. [ 649.299491][T25266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4866'. [ 649.300078][T25266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4866'. [ 649.304073][T25266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4866'. [ 649.304727][T25266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4866'. [ 649.305348][T25266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4866'. [ 649.305904][T25266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4866'. [ 649.408954][T25266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4866'. [ 649.409237][T25266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4866'. [ 649.528760][T25228] udevd[25228]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 649.614235][T25032] udevd[25032]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 650.188053][T25335] ip_tables: iptables: counters copy to user failed while replacing table [ 651.300013][T25361] tap0: tun_chr_ioctl cmd 1074025676 [ 651.300043][T25361] tap0: owner set to 0 [ 651.302223][T25361] tap0: tun_chr_ioctl cmd 1079531642 [ 651.394002][T25365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.505105][T25369] netlink: NAT attribute has 5 unknown bytes [ 651.505142][T25369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 651.594753][T25365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.719479][T25428] IPv6: sit2: Disabled Multicast RS [ 652.822295][T25434] ip_tables: iptables: counters copy to user failed while replacing table [ 652.843870][T25431] team0: Device is already in use. [ 655.348903][T25517] nbd: couldn't find device at index 15663104 [ 655.439825][T25525] __nla_validate_parse: 65 callbacks suppressed [ 655.439846][T25525] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4925'. [ 655.472165][T25525] netlink: 13951 bytes leftover after parsing attributes in process `syz.5.4925'. [ 655.513358][T25528] netlink: 13951 bytes leftover after parsing attributes in process `syz.5.4925'. [ 655.620923][T25536] xt_MASQUERADE: bad MAP_IPS. [ 655.622908][T25536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4927'. [ 656.107009][T25559] IPv6: NLM_F_CREATE should be specified when creating new route [ 656.107102][T25559] validate_nla: 2 callbacks suppressed [ 656.109465][T25559] netlink: 'syz.0.4936': attribute type 1 has an invalid length. [ 656.125876][T25566] netlink: 'syz.0.4936': attribute type 1 has an invalid length. [ 656.241125][T25572] veth1_to_bond: Caught tx_queue_len zero misconfig [ 656.670232][T25595] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4945'. [ 656.731021][T25606] ieee802154 phy0 wpan0: encryption failed: -126 [ 656.731348][T25607] ieee802154 phy0 wpan0: encryption failed: -126 [ 656.961551][T25613] syzkaller0: entered promiscuous mode [ 656.961574][T25613] syzkaller0: entered allmulticast mode [ 656.972810][T25615] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4951'. [ 657.112268][T25619] syzkaller0: entered promiscuous mode [ 657.112290][T25619] syzkaller0: entered allmulticast mode [ 657.126221][T25628] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4953'. [ 657.366868][T25636] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4955'. [ 657.443644][T25634] xt_hl: Unknown TTL match mode: 255 [ 657.526849][T25645] netlink: 'syz.0.4959': attribute type 11 has an invalid length. [ 657.526869][T25645] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4959'. [ 657.691903][T25651] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 657.764131][T25656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4961'. [ 657.764163][T25656] netlink: 'syz.5.4961': attribute type 10 has an invalid length. [ 657.866746][T25656] geneve3: entered promiscuous mode [ 657.866770][T25656] geneve3: entered allmulticast mode [ 658.146029][T25683] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 658.739417][T25702] netlink: 'syz.0.4971': attribute type 10 has an invalid length. [ 658.740204][T25702] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.740273][T25702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.740518][T25702] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.740632][T25702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.745306][T25702] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 658.811054][T25706] bridge_slave_1: left allmulticast mode [ 658.811079][T25706] bridge_slave_1: left promiscuous mode [ 658.814390][T25706] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.881241][T25706] bridge_slave_0: left allmulticast mode [ 658.881268][T25706] bridge_slave_0: left promiscuous mode [ 658.881512][T25706] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.041859][T25706] bond0: (slave bridge0): Releasing backup interface [ 659.082873][T25713] netlink: 'syz.1.4972': attribute type 4 has an invalid length. [ 659.083213][T25713] netlink: 'syz.1.4972': attribute type 4 has an invalid length. [ 659.083470][T25713] netlink: 'syz.1.4972': attribute type 4 has an invalid length. [ 659.083980][T25713] netlink: 'syz.1.4972': attribute type 4 has an invalid length. [ 659.084256][T25713] netlink: 'syz.1.4972': attribute type 4 has an invalid length. [ 659.120956][T25713] netlink: 'syz.1.4972': attribute type 4 has an invalid length. [ 659.604536][T25734] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 659.632552][T25734] bond6 (unregistering): Released all slaves [ 660.401392][T25771] syzkaller0: entered promiscuous mode [ 660.401415][T25771] syzkaller0: entered allmulticast mode [ 660.577814][T25782] __nla_validate_parse: 9 callbacks suppressed [ 660.577834][T25782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4993'. [ 660.577846][T25782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4993'. [ 660.899330][T25800] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4995'. [ 661.221702][T25816] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5001'. [ 661.316770][T25819] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5003'. [ 661.441662][T25828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.505634][T25829] netlink: 'syz.1.5006': attribute type 21 has an invalid length. [ 661.570062][T25829] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5006'. [ 661.905326][T25852] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5012'. [ 661.943246][T25852] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5012'. [ 661.943273][T25852] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5012'. [ 662.041839][T25863] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5016'. [ 662.851251][T25880] veth7: entered allmulticast mode [ 663.456659][T25915] vlan1: entered promiscuous mode [ 663.456681][T25915] 0ªX¹¦Dö»: entered promiscuous mode [ 663.578078][T25923] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 663.684371][T25927] sctp: [Deprecated]: syz.2.5032 (pid 25927) Use of struct sctp_assoc_value in delayed_ack socket option. [ 663.684371][T25927] Use struct sctp_sack_info instead [ 664.665290][T25977] netlink: 'syz.5.5045': attribute type 1 has an invalid length. [ 664.665312][T25977] netlink: 'syz.5.5045': attribute type 3 has an invalid length. [ 665.024693][T25985] netlink: Unknown conntrack attr (type=1030, max=9) [ 665.219390][T26000] bond8: entered promiscuous mode [ 665.219421][T26000] bond8: entered allmulticast mode [ 665.619046][T26019] __nla_validate_parse: 16 callbacks suppressed [ 665.619067][T26019] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5055'. [ 665.913270][T26039] syzkaller0: entered promiscuous mode [ 665.913293][T26039] syzkaller0: entered allmulticast mode [ 665.949221][T26039] tipc: Enabled bearer , priority 0 [ 666.096496][T26038] tipc: Resetting bearer [ 666.135307][T26043] x_tables: unsorted entry at hook 3 [ 666.238296][T26038] tipc: Disabling bearer [ 666.349595][T26058] bond6: entered promiscuous mode [ 666.349657][T26058] bond6: entered allmulticast mode [ 666.350077][T26058] 8021q: adding VLAN 0 to HW filter on device bond6 [ 666.401242][T26064] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5063'. [ 666.581158][T26069] netlink: 'syz.0.5067': attribute type 1 has an invalid length. [ 666.641626][T26077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5069'. [ 666.663325][T26077] bond0: (slave team0): Releasing backup interface [ 666.664535][T26077] team0 (unregistering): left allmulticast mode [ 666.664554][T26077] team_slave_1: left allmulticast mode [ 666.741043][T26077] team0 (unregistering): Port device team_slave_1 removed [ 666.816407][T26076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 666.837543][T26084] pim6reg1: entered promiscuous mode [ 666.837564][T26084] pim6reg1: entered allmulticast mode [ 667.004789][T26090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5072'. [ 667.041564][T26090] 8021q: adding VLAN 0 to HW filter on device bond7 [ 667.043064][T26090] bond0: (slave bond7): Enslaving as an active interface with an up link [ 667.542642][T26118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 667.671705][T26121] netlink: 'syz.2.5082': attribute type 1 has an invalid length. [ 667.734899][T26133] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5082'. [ 667.779079][T26133] 8021q: adding VLAN 0 to HW filter on device bond9 [ 667.912438][T26141] pimreg: entered allmulticast mode [ 668.079571][T26145] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 668.162858][T26145] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5088'. [ 668.532536][T26163] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5091'. [ 668.597876][T26156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5090'. [ 669.243283][T26194] netlink: 'syz.4.5098': attribute type 1 has an invalid length. [ 669.675501][T26227] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5105'. [ 669.708097][T26226] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5106'. [ 670.559687][T26257] ieee802154 phy0 wpan0: encryption failed: -22 [ 670.791423][T26270] __nla_validate_parse: 2 callbacks suppressed [ 670.791444][T26270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5118'. [ 671.243502][T26287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5122'. [ 671.243530][T26287] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5122'. [ 671.243545][T26287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5122'. [ 671.449291][T26291] netlink: zone id is out of range [ 671.451992][T26292] netlink: zone id is out of range [ 671.452078][T26292] netlink: zone id is out of range [ 671.452220][T26292] netlink: zone id is out of range [ 671.452469][T26292] netlink: zone id is out of range [ 671.452698][T26292] netlink: zone id is out of range [ 671.452705][T26292] netlink: zone id is out of range [ 671.452712][T26292] netlink: zone id is out of range [ 671.452718][T26292] netlink: zone id is out of range [ 671.452724][T26292] netlink: zone id is out of range [ 671.963117][T26303] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5128'. [ 671.963142][T26303] netlink: 'syz.2.5128': attribute type 3 has an invalid length. [ 671.963157][T26303] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5128'. [ 671.963380][T26303] netlink: 'syz.2.5128': attribute type 3 has an invalid length. [ 672.212414][T26303] xt_CT: No such helper "netbios-ns" [ 672.688073][T26351] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5140'. [ 672.731616][T26347] netlink: 'syz.0.5139': attribute type 1 has an invalid length. [ 672.785322][T26355] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5142'. [ 673.049989][T26368] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5148'. [ 673.101448][T26371] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5149'. [ 673.136552][T26368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.288896][T26379] bond7: Invalid ad_actor_system MAC address. [ 673.288916][T26379] bond7: option ad_actor_system: invalid value (1) [ 673.290889][T26379] bond7 (unregistering): Released all slaves [ 673.627878][T26403] IPv6: NLM_F_CREATE should be specified when creating new route [ 673.854840][T26419] netlink: 'syz.4.5160': attribute type 11 has an invalid length. [ 674.256110][T26435] ip6t_REJECT: ECHOREPLY is not supported [ 674.257050][T26435] netlink: 'syz.5.5167': attribute type 15 has an invalid length. [ 674.968611][T26478] netlink: 'syz.5.5178': attribute type 1 has an invalid length. [ 675.086728][T26478] 8021q: adding VLAN 0 to HW filter on device bond9 [ 675.213828][T26477] erspan0: left allmulticast mode [ 675.213856][T26477] erspan0: left promiscuous mode [ 675.214070][T26477] bridge1: port 1(erspan0) entered disabled state [ 675.244533][T26477] bond0: (slave bond_slave_0): Releasing backup interface [ 675.246946][T26477] bond_slave_0: left allmulticast mode [ 675.278000][T26477] bond0: (slave bond_slave_1): Releasing backup interface [ 675.288051][T26477] bond_slave_1: left allmulticast mode [ 675.296519][T26477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 675.296541][T26477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 675.342912][T26477] bond0: (slave netdevsim1): Releasing backup interface [ 675.344967][T26477] netdevsim netdevsim2 netdevsim1: left allmulticast mode [ 675.391740][T26477] bond6: (slave bridge0): Releasing backup interface [ 675.391767][T26477] bridge0: left promiscuous mode [ 675.420547][T26477] bond7: (slave bridge33): Releasing backup interface [ 675.420573][T26477] bridge33: left promiscuous mode [ 675.420754][T26477] bridge33: left allmulticast mode [ 675.644723][T26508] lo: left promiscuous mode [ 675.732253][T26518] bridge5: entered promiscuous mode [ 675.732315][T26518] bridge5: entered allmulticast mode [ 675.784493][T26518] netlink: 'syz.0.5188': attribute type 39 has an invalid length. [ 675.859406][T26526] __nla_validate_parse: 15 callbacks suppressed [ 675.859425][T26526] netlink: 232 bytes leftover after parsing attributes in process `syz.5.5191'. [ 675.875128][T26530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5190'. [ 676.022638][T26527] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5189'. [ 676.158466][T26540] netlink: 27 bytes leftover after parsing attributes in process `syz.1.5192'. [ 676.642385][T26557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5198'. [ 676.717971][T26557] 8021q: adding VLAN 0 to HW filter on device bond13 [ 676.751187][T26572] macvlan2: entered promiscuous mode [ 676.751209][T26572] macvlan2: entered allmulticast mode [ 676.752226][T26572] bond13: entered promiscuous mode [ 676.752975][T26572] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 676.820092][T26572] bond13: left promiscuous mode [ 676.847630][T26570] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5201'. [ 676.955064][T26582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5206'. [ 677.019821][T26584] netlink: 'syz.5.5204': attribute type 12 has an invalid length. [ 677.019841][T26584] netlink: 'syz.5.5204': attribute type 29 has an invalid length. [ 677.019852][T26584] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5204'. [ 677.019865][T26584] netlink: 'syz.5.5204': attribute type 1 has an invalid length. [ 677.035553][T26570] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5201'. [ 677.140698][T26570] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5201'. [ 677.560564][T26602] syzkaller0: entered promiscuous mode [ 677.560586][T26602] syzkaller0: entered allmulticast mode [ 677.591763][T26608] netlink: 'syz.4.5211': attribute type 21 has an invalid length. [ 677.633385][T26611] net_ratelimit: 26 callbacks suppressed [ 677.633404][T26611] openvswitch: netlink: IPv4 tunnel dst address is zero [ 677.887003][T26632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 677.947197][T26636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 678.064345][T26647] netlink: 'syz.4.5217': attribute type 1 has an invalid length. [ 678.064383][T26647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 678.371161][T26690] Cannot find set identified by id 4 to match [ 679.125649][T26711] netlink: 'syz.4.5224': attribute type 7 has an invalid length. [ 679.125670][T26711] netlink: 'syz.4.5224': attribute type 5 has an invalid length. [ 679.463973][T26723] netlink: 'syz.4.5228': attribute type 10 has an invalid length. [ 679.505182][T26723] veth0_to_bond: entered allmulticast mode [ 679.680390][T26734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 680.244074][T26752] ip6gre4: entered promiscuous mode [ 681.144773][T26788] ip_tables: iptables: counters copy to user failed while replacing table [ 681.302636][T26791] __nla_validate_parse: 69 callbacks suppressed [ 681.302655][T26791] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5249'. [ 681.302686][T26791] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5249'. [ 681.412738][T26798] xt_hashlimit: size too large, truncated to 1048576 [ 681.431422][T26799] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5250'. [ 681.975023][T26817] ip6gre1: entered promiscuous mode [ 682.383108][T26842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5263'. [ 682.387077][T26838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5263'. [ 682.527516][T26848] syz_tun: entered allmulticast mode [ 682.540222][T26847] syz_tun: left allmulticast mode [ 683.066997][T26880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5275'. [ 683.078745][T26880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5275'. [ 683.079350][T26879] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5274'. [ 683.623645][T26916] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5284'. [ 683.873804][T26930] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5287'. [ 684.400600][T26955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 684.405829][T26955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 684.430533][T26955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 684.433909][T26955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 684.460140][T26955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 684.465883][T26955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 684.466436][T26955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 684.467043][T26955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 684.505086][T26955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 684.505603][T26955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 684.602751][T26963] block nbd0: not configured, cannot reconfigure [ 684.934926][T26983] netlink: 'syz.4.5296': attribute type 4 has an invalid length. [ 685.725368][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.452178][T27014] veth1_macvtap: left promiscuous mode [ 687.672946][T27043] __nla_validate_parse: 68 callbacks suppressed [ 687.672966][T27043] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5307'. [ 687.675468][T27043] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5307'. [ 687.675748][T27043] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5307'. [ 687.794636][T27050] tipc: Enabled bearer , priority 10 [ 687.849748][T27042] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5306'. [ 687.849980][T27042] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5306'. [ 687.850179][T27042] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5306'. [ 687.850382][T27042] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5306'. [ 687.850584][T27042] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5306'. [ 687.850795][T27042] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5306'. [ 687.850990][T27042] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5306'. [ 688.107699][T27065] netlink: 'syz.1.5311': attribute type 25 has an invalid length. [ 688.408737][ T31] audit: type=1800 audit(1790752854.523:7): pid=27075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5315" name="memory.events" dev="tmpfs" ino=2626 res=0 errno=0 [ 688.415892][ T31] audit: type=1804 audit(1790752854.523:8): pid=27075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.5315" name="/newroot/510/memory.events" dev="tmpfs" ino=2626 res=1 errno=0 [ 688.482260][T27080] syzkaller0: entered promiscuous mode [ 688.482280][T27080] syzkaller0: entered allmulticast mode [ 689.246829][T27125] netlink: 'syz.5.5328': attribute type 10 has an invalid length. [ 690.019024][T27159] nbd0: detected capacity change from 0 to 63 [ 690.064805][ T52] block nbd0: Receive control failed (result -104) [ 690.824744][T27208] sctp: [Deprecated]: syz.1.5350 (pid 27208) Use of struct sctp_assoc_value in delayed_ack socket option. [ 690.824744][T27208] Use struct sctp_sack_info instead [ 690.825660][T27208] netlink: 'syz.1.5350': attribute type 10 has an invalid length. [ 690.847019][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 690.961944][T27214] netlink: 'syz.4.5352': attribute type 1 has an invalid length. [ 691.028497][T27214] 8021q: adding VLAN 0 to HW filter on device bond7 [ 691.054526][T27216] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 691.095244][T27223] netlink: 'syz.4.5352': attribute type 1 has an invalid length. [ 691.435496][T27238] bond10: Invalid ad_actor_system MAC address. [ 691.435517][T27238] bond10: option ad_actor_system: invalid value (1) [ 691.437492][T27238] bond10 (unregistering): Released all slaves [ 692.520098][T27285] team0 (unregistering): Port device team_slave_0 removed [ 692.576547][T27285] team0 (unregistering): Port device team_slave_1 removed [ 692.682808][T27272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 693.452263][T27336] __nla_validate_parse: 80 callbacks suppressed [ 693.452282][T27336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5389'. [ 693.469873][T27332] netlink: 'syz.2.5387': attribute type 4 has an invalid length. [ 693.470173][T27331] netlink: 'syz.2.5387': attribute type 4 has an invalid length. [ 693.569615][T27332] netlink: 'syz.2.5387': attribute type 4 has an invalid length. [ 693.569760][T27332] netlink: 'syz.2.5387': attribute type 4 has an invalid length. [ 693.569884][T27332] netlink: 'syz.2.5387': attribute type 4 has an invalid length. [ 693.569998][T27332] netlink: 'syz.2.5387': attribute type 4 has an invalid length. [ 693.570110][T27332] netlink: 'syz.2.5387': attribute type 4 has an invalid length. [ 694.017211][T27361] sctp: [Deprecated]: syz.0.5395 (pid 27361) Use of struct sctp_assoc_value in delayed_ack socket option. [ 694.017211][T27361] Use struct sctp_sack_info instead [ 694.374510][T27379] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5398'. [ 694.522314][T27379] bond14 (unregistering): Released all slaves [ 694.781872][T27392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5401'. [ 695.073272][T27420] [ 695.075640][T27420] ====================================================== [ 695.082658][T27420] WARNING: possible circular locking dependency detected [ 695.089687][T27420] syzkaller #0 Not tainted [ 695.094093][T27420] ------------------------------------------------------ [ 695.101112][T27420] syz.5.5405/27420 is trying to acquire lock: [ 695.107167][T27420] ffffffff8ee904e0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x600 [ 695.116303][T27420] [ 695.116303][T27420] but task is already holding lock: [ 695.123658][T27420] ffff88802986e9b8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 695.133158][T27420] [ 695.133158][T27420] which lock already depends on the new lock. [ 695.133158][T27420] [ 695.143561][T27420] [ 695.143561][T27420] the existing dependency chain (in reverse order) is: [ 695.152574][T27420] [ 695.152574][T27420] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 695.160143][T27420] __might_fault+0xcb/0x130 [ 695.165181][T27420] _copy_from_user+0x28/0xb0 [ 695.170305][T27420] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 695.176820][T27420] ip_generic_getfrag+0x149/0x2d0 [ 695.182365][T27420] __ip6_append_data+0x3b26/0x40c0 [ 695.188000][T27420] ip6_append_data+0x108/0x270 [ 695.193292][T27420] rawv6_sendmsg+0x1298/0x18c0 [ 695.198579][T27420] sock_sendmsg_nosec+0x10e/0x180 [ 695.204135][T27420] ____sys_sendmsg+0x54e/0x850 [ 695.209420][T27420] ___sys_sendmsg+0x2a5/0x360 [ 695.214619][T27420] __x64_sys_sendmsg+0x1b1/0x290 [ 695.220081][T27420] do_syscall_64+0x166/0x520 [ 695.225304][T27420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.231733][T27420] [ 695.231733][T27420] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 695.239479][T27420] lock_sock_nested+0x41/0x100 [ 695.244769][T27420] inet_shutdown+0x6a/0x390 [ 695.249788][T27420] nbd_mark_nsock_dead+0x2cb/0x550 [ 695.255425][T27420] recv_work+0x1cee/0x1e10 [ 695.260366][T27420] process_scheduled_works+0xc3d/0x1630 [ 695.266431][T27420] worker_thread+0xa47/0xfb0 [ 695.271593][T27420] kthread+0x38b/0x480 [ 695.276190][T27420] ret_from_fork+0x514/0xb70 [ 695.281302][T27420] ret_from_fork_asm+0x1a/0x30 [ 695.286598][T27420] [ 695.286598][T27420] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 695.294245][T27420] __mutex_lock+0x19d/0x1550 [ 695.299366][T27420] nbd_queue_rq+0x373/0xff0 [ 695.304392][T27420] blk_mq_dispatch_rq_list+0x499/0x1990 [ 695.310455][T27420] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 695.317301][T27420] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 695.323808][T27420] blk_mq_run_work_fn+0x16c/0x300 [ 695.329368][T27420] process_scheduled_works+0xc3d/0x1630 [ 695.335444][T27420] worker_thread+0xa47/0xfb0 [ 695.340561][T27420] kthread+0x38b/0x480 [ 695.345144][T27420] ret_from_fork+0x514/0xb70 [ 695.350285][T27420] ret_from_fork_asm+0x1a/0x30 [ 695.355572][T27420] [ 695.355572][T27420] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 695.362781][T27420] __mutex_lock+0x19d/0x1550 [ 695.367899][T27420] nbd_queue_rq+0xc1/0xff0 [ 695.372845][T27420] blk_mq_dispatch_rq_list+0x499/0x1990 [ 695.378920][T27420] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 695.385778][T27420] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 695.392279][T27420] blk_mq_run_work_fn+0x16c/0x300 [ 695.397821][T27420] process_scheduled_works+0xc3d/0x1630 [ 695.403887][T27420] worker_thread+0xa47/0xfb0 [ 695.408992][T27420] kthread+0x38b/0x480 [ 695.413573][T27420] ret_from_fork+0x514/0xb70 [ 695.418682][T27420] ret_from_fork_asm+0x1a/0x30 [ 695.423977][T27420] [ 695.423977][T27420] -> #3 (set->srcu){.+.+}-{0:0}: [ 695.431108][T27420] __synchronize_srcu+0xc9/0x2f0 [ 695.436574][T27420] elevator_switch+0x1e8/0x7b0 [ 695.441861][T27420] elevator_change+0x2fa/0x480 [ 695.444706][T27426] net_ratelimit: 58 callbacks suppressed [ 695.444736][T27426] openvswitch: netlink: EtherType 2 is less than min 600 [ 695.459755][T27420] elevator_set_default+0x375/0x440 [ 695.465473][T27420] blk_register_queue+0x3f3/0x4e0 [ 695.471021][T27420] __add_disk+0x6b8/0xdb0 [ 695.475868][T27420] add_disk_fwnode+0x100/0x3a0 [ 695.481150][T27420] nbd_dev_add+0x733/0xb60 [ 695.486082][T27420] nbd_init+0x168/0x1f0 [ 695.490751][T27420] do_one_initcall+0x250/0x870 [ 695.496034][T27420] do_initcall_level+0x10a/0x1a0 [ 695.501482][T27420] do_initcalls+0x59/0xa0 [ 695.506325][T27420] kernel_init_freeable+0x29d/0x3e0 [ 695.512035][T27420] kernel_init+0x22/0x1d0 [ 695.516874][T27420] ret_from_fork+0x514/0xb70 [ 695.521984][T27420] ret_from_fork_asm+0x1a/0x30 [ 695.527273][T27420] [ 695.527273][T27420] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 695.535086][T27420] __mutex_lock+0x19d/0x1550 [ 695.540200][T27420] elevator_change+0x1af/0x480 [ 695.545476][T27420] elevator_set_none+0xb5/0x140 [ 695.550841][T27420] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 695.557169][T27420] nbd_start_device+0x189/0xb30 [ 695.562537][T27420] nbd_genl_connect+0x167d/0x1cd0 [ 695.568081][T27420] genl_family_rcv_msg_doit+0x233/0x340 [ 695.574160][T27420] genl_rcv_msg+0x614/0x7a0 [ 695.579192][T27420] netlink_rcv_skb+0x226/0x4a0 [ 695.584478][T27420] genl_rcv+0x28/0x40 [ 695.588977][T27420] netlink_unicast+0x7bd/0x940 [ 695.594353][T27420] netlink_sendmsg+0x813/0xb40 [ 695.599634][T27420] sock_sendmsg_nosec+0x13a/0x180 [ 695.605183][T27420] ____sys_sendmsg+0x54e/0x850 [ 695.610469][T27420] ___sys_sendmsg+0x2a5/0x360 [ 695.615680][T27420] __x64_sys_sendmsg+0x1b1/0x290 [ 695.621154][T27420] do_syscall_64+0x166/0x520 [ 695.626273][T27420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.632729][T27420] [ 695.632729][T27420] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 695.641351][T27420] blk_alloc_queue+0x544/0x690 [ 695.646641][T27420] __blk_mq_alloc_disk+0x194/0x390 [ 695.652283][T27420] nbd_dev_add+0x494/0xb60 [ 695.657211][T27420] nbd_init+0x168/0x1f0 [ 695.661885][T27420] do_one_initcall+0x250/0x870 [ 695.667169][T27420] do_initcall_level+0x10a/0x1a0 [ 695.672795][T27420] do_initcalls+0x59/0xa0 [ 695.677645][T27420] kernel_init_freeable+0x29d/0x3e0 [ 695.683362][T27420] kernel_init+0x22/0x1d0 [ 695.688206][T27420] ret_from_fork+0x514/0xb70 [ 695.693307][T27420] ret_from_fork_asm+0x1a/0x30 [ 695.698682][T27420] [ 695.698682][T27420] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 695.705900][T27420] __lock_acquire+0x164c/0x2de0 [ 695.711273][T27420] lock_acquire+0x115/0x350 [ 695.716292][T27420] fs_reclaim_acquire+0x71/0x100 [ 695.721755][T27420] prepare_alloc_pages+0x149/0x600 [ 695.727387][T27420] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 695.733708][T27420] alloc_pages_mpol+0x21e/0x390 [ 695.739088][T27420] alloc_pages_noprof+0xb1/0x2b0 [ 695.744541][T27420] pte_alloc_one+0x22/0x370 [ 695.749561][T27420] do_pte_missing+0x13c8/0x34b0 [ 695.754926][T27420] handle_mm_fault+0x1a53/0x3750 [ 695.760382][T27420] do_user_addr_fault+0x746/0x1340 [ 695.766025][T27420] exc_page_fault+0x6a/0xc0 [ 695.771049][T27420] asm_exc_page_fault+0x26/0x30 [ 695.776424][T27420] rep_movs_alternative+0xf/0xa0 [ 695.781896][T27420] _copy_from_user+0x7a/0xb0 [ 695.787007][T27420] hci_sock_setsockopt+0x5ba/0xa90 [ 695.792641][T27420] do_sock_setsockopt+0x17c/0x1b0 [ 695.798181][T27420] __x64_sys_setsockopt+0x13d/0x1b0 [ 695.803896][T27420] do_syscall_64+0x166/0x520 [ 695.809006][T27420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.815414][T27420] [ 695.815414][T27420] other info that might help us debug this: [ 695.815414][T27420] [ 695.825643][T27420] Chain exists of: [ 695.825643][T27420] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 695.825643][T27420] [ 695.838245][T27420] Possible unsafe locking scenario: [ 695.838245][T27420] [ 695.845683][T27420] CPU0 CPU1 [ 695.851037][T27420] ---- ---- [ 695.856415][T27420] rlock(&mm->mmap_lock); [ 695.860833][T27420] lock(sk_lock-AF_INET6); [ 695.867850][T27420] lock(&mm->mmap_lock); [ 695.874701][T27420] lock(fs_reclaim); [ 695.878865][T27420] [ 695.878865][T27420] *** DEADLOCK *** [ 695.878865][T27420] [ 695.886996][T27420] locks held by syz.5.5405/27420: 2, last CPU#0: [ 695.893309][T27420] #0: ffff88803341a260 (sk_lock-AF_BLUETOOTH-BTPROTO_HCI){+.+.}-{0:0}, at: hci_sock_setsockopt+0x1be/0xa90 [ 695.904800][T27420] #1: ffff88802986e9b8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 695.914741][T27420] [ 695.914741][T27420] stack backtrace: [ 695.920632][T27420] CPU: 0 UID: 0 PID: 27420 Comm: syz.5.5405 Not tainted syzkaller #0 PREEMPT(full) [ 695.929998][T27420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 695.940043][T27420] Call Trace: [ 695.943316][T27420] [ 695.946241][T27420] dump_stack_lvl+0xe8/0x150 [ 695.950835][T27420] print_circular_bug+0x2e2/0x300 [ 695.955858][T27420] check_noncircular+0x12f/0x150 [ 695.960789][T27420] __lock_acquire+0x164c/0x2de0 [ 695.965652][T27420] ? __lock_acquire+0x747/0x2de0 [ 695.970591][T27420] ? lock_acquire+0x115/0x350 [ 695.975281][T27420] lock_acquire+0x115/0x350 [ 695.979800][T27420] ? prepare_alloc_pages+0x149/0x600 [ 695.985094][T27420] ? ktime_get+0x45/0x220 [ 695.989423][T27420] fs_reclaim_acquire+0x71/0x100 [ 695.994360][T27420] ? prepare_alloc_pages+0x149/0x600 [ 695.999648][T27420] prepare_alloc_pages+0x149/0x600 [ 696.004764][T27420] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 696.010573][T27420] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 696.016900][T27420] ? __pfx_policy_nodemask+0x10/0x10 [ 696.022224][T27420] ? finish_task_switch+0x40e/0xc60 [ 696.027436][T27420] alloc_pages_mpol+0x21e/0x390 [ 696.032299][T27420] alloc_pages_noprof+0xb1/0x2b0 [ 696.037238][T27420] pte_alloc_one+0x22/0x370 [ 696.041754][T27420] do_pte_missing+0x13c8/0x34b0 [ 696.046610][T27420] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 696.052858][T27420] handle_mm_fault+0x1a53/0x3750 [ 696.057800][T27420] ? handle_mm_fault+0xf1/0x3750 [ 696.062741][T27420] ? __pfx_handle_mm_fault+0x10/0x10 [ 696.068040][T27420] ? __lock_acquire+0x747/0x2de0 [ 696.073005][T27420] ? lock_mm_and_find_vma+0xa7/0x340 [ 696.078314][T27420] do_user_addr_fault+0x746/0x1340 [ 696.083440][T27420] exc_page_fault+0x6a/0xc0 [ 696.087953][T27420] asm_exc_page_fault+0x26/0x30 [ 696.092815][T27420] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 696.098536][T27420] Code: c4 10 c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d 67 04 00 66 2e [ 696.118145][T27420] RSP: 0018:ffffc9000707fd58 EFLAGS: 00050202 [ 696.124217][T27420] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 696.132189][T27420] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffc9000707fde0 [ 696.140165][T27420] RBP: ffffc9000707fe48 R08: 0000000000000003 R09: 0000000000000004 [ 696.148132][T27420] R10: dffffc0000000000 R11: fffff52000e0ffbc R12: 1ffff92000e0ffb4 [ 696.156102][T27420] R13: 0000000000000004 R14: ffffc9000707fde0 R15: 0000200000000080 [ 696.164179][T27420] _copy_from_user+0x7a/0xb0 [ 696.168786][T27420] hci_sock_setsockopt+0x5ba/0xa90 [ 696.173914][T27420] ? __pfx_hci_sock_setsockopt+0x10/0x10 [ 696.179555][T27420] ? aa_sock_opt_perm+0x142/0x1e0 [ 696.184594][T27420] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 696.190150][T27420] ? __pfx_hci_sock_setsockopt+0x10/0x10 [ 696.195797][T27420] do_sock_setsockopt+0x17c/0x1b0 [ 696.200832][T27420] __x64_sys_setsockopt+0x13d/0x1b0 [ 696.206041][T27420] do_syscall_64+0x166/0x520 [ 696.210640][T27420] ? trace_irq_disable+0x3b/0x140 [ 696.215681][T27420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.221751][T27420] ? clear_bhb_loop+0x70/0xc0 [ 696.226438][T27420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.232342][T27420] RIP: 0033:0x7f007ab9e159 [ 696.236770][T27420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.256386][T27420] RSP: 002b:00007f007ba14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 696.264810][T27420] RAX: ffffffffffffffda RBX: 00007f007ae25fa0 RCX: 00007f007ab9e159 [ 696.272788][T27420] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000006 [ 696.280760][T27420] RBP: 00007f007ac3506b R08: 0000000000000004 R09: 0000000000000000 [ 696.288746][T27420] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 696.296719][T27420] R13: 00007f007ae26038 R14: 00007f007ae25fa0 R15: 00007ffd7abdbfc8 [ 696.304702][T27420]