last executing test programs: 5m57.554301488s ago: executing program 4 (id=2922): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) accept$nfc_llcp(r1, 0x0, &(0x7f0000000280)) sendmsg$DEVLINK_CMD_TRAP_GET(r0, 0x0, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) poll(&(0x7f00000030c0)=[{r5, 0x1000}], 0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000ffdbdf254400000208000300", @ANYRES32=r3, @ANYBLOB="0c00700005000100010000000a0018000303030303030000"], 0x34}}, 0x20000010) accept4(r4, &(0x7f0000000140)=@ieee802154={0x24, @short}, &(0x7f00000001c0)=0x80, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000f5ffffff0000000000000063013800000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) 5m56.749217855s ago: executing program 4 (id=2926): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='lp', 0x2) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r1 = socket$inet6(0xa, 0x80000, 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x4b, 0x7, 0x1ff, "fac16a590b17"}}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x798, 0x478, 0x270, 0x478, 0x478, 0x0, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x21}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x6, 0x8, 0x6}}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @private0, @mcast2, @private0, @empty, @private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@mcast1, 0x23, 0x29, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000070000000000000700000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc10466554b0470571f00000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x40040c0) sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e24, 0xfffffff3, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r2], 0x30}, 0x0) accept4(r1, &(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f00000001c0)=0x80, 0x80000) epoll_create(0x8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000a00)={{r2, &(0x7f0000000800)='\'(\x00', 0x101401, &(0x7f0000000840)={@align=0x512ba208, {0x8, 0x3, 0x5, 0x2}}, 0x7, &(0x7f0000000880), &(0x7f00000008c0)=0x8}, {[0xba4, 0xa, 0x7, 0xae342e2]}, 0x3, 0xc5, &(0x7f0000000900)=""/197}) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c00)="f78d9ca38fff48f3be52163448412ba8ea2945e56c9d0c07b90e0aa06445cf2b74c2278ad7ad8633cd51dd7acf4536bac8c4635ff529b680a56b712e3cb5af7936e279fe07ba2f20334a4fdaec8c909e48d219b0e7e978166e29f691adec0e5526148adbaad390b4bd6b7e1050abf68515280ca2189a069539aacd9840e7c5b133180a836a9c7dc456448eafb217def1d6ca3e62338caebb4ed33a7c9eabec21a6f247d02a244e0cefaaf4386e99396a5afe2c34149995de08a45d3f2177579a01e0a2ea114a7e0e23cc5c260ed375faa4b119b2c8a8942a2f089cf952b6e4b21ba713", 0xe3}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4dbc3ae079f5fee8f28051926aae1efd7e0054a863f425cfe6cb54e7cb51726b360fbb37b4fe035bbb095873048", 0x48}, {&(0x7f0000000d00)="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", 0x1d5}], 0x3, 0x0, 0x0, 0x80}], 0x1, 0x20000801) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r7, 0x1, 0x2f, 0x0, &(0x7f0000000040)=0x700) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) 5m55.811996972s ago: executing program 4 (id=2937): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x8, 0xbd, 0xffffffff, @vifc_lcl_ifindex=r1, @multicast1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a8527f76ec1d39e537c4c3060c6a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) 5m55.61729767s ago: executing program 4 (id=2939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'ip_vti0\x00', 0xca58c30f81b6079f}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="240000001900010927bd70002000000002182000ff03fd000001000008000100ac1414"], 0x24}, 0x1, 0x0, 0x0, 0x44004080}, 0x0) socketpair(0x28, 0x4, 0x1, &(0x7f00000001c0)) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000007b030000000000008500000083000000790900000000000055090100000000009500000000000000bf91000000000000b70200000200000b8500000069000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000200), &(0x7f0000000240)=r5}, 0x20) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r9, 0x3a}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x14}], 0x1}, 0x0) 5m55.225166426s ago: executing program 4 (id=2943): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2000000015, 0x80005, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x10000008}) r2 = socket$inet6(0xa, 0x3, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x2}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff020000000000000000000000000001"], 0x0) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x6}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000600050003"], 0x24}}, 0x0) 5m55.106945265s ago: executing program 4 (id=2946): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080), 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20006004) 5m40.017193221s ago: executing program 32 (id=2946): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080), 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20006004) 2m27.457761771s ago: executing program 0 (id=4850): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r1, 0x401, 0x1d0c, 0x2}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r2, &(0x7f0000000180)="a66639102e9edbcab4de3892843d2dbb607aa3dab60cdef6ff2b2a50e4e43e72dd1ae9558d1751219ee30367dca35a8f2100b82268a735461dbecc1eb83b1e3e24c70e7306c059150c35c4458dc8025b3a"}, 0x20) 2m27.045984305s ago: executing program 0 (id=4854): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x44040) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x5f}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001340)={&(0x7f0000000080), 0x6e, &(0x7f0000001240)=[{&(0x7f0000000100)=""/9, 0x9}, {&(0x7f0000000240)=""/4096, 0x1000}], 0x2, &(0x7f0000001280)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x2022) 2m26.631805752s ago: executing program 0 (id=4856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c, 0xc0000) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x9}}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @remote}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20084084) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="f7ffffff0f00010000000000000000000000000a20000000000a03000000000000000000070000accdd964721e1149f889534e0000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008499e19c5ecad00054000000021440000001e0a01020000000000000000070000000900020073797a31000000000900010073797a30000000001800038014000080080003400000000004000a80f3ff01801400000010000100000000000000"], 0xc8}}, 0x0) 2m25.920896614s ago: executing program 0 (id=4859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x101, 0x0, 0x0, {0xe, 0x0, 0x6}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_USERDATA={0x16, 0x7, 0x1, 0x0, "3ffcc889cfa39b15c844ff08195e897fdca3"}]}, @NFT_MSG_NEWTABLE={0xc0, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x46, 0x6, "745fcba774e7798a8d8c10db62c9778636426424e6603025fbbd22248aa8aa93e6ffe226889d39d5275daed5a9c02186a092f1fb5dddff979d77844351af1bd49776"}, @NFTA_TABLE_USERDATA={0x4b, 0x6, "9dafb12298e6d52ead1e4b0c07e417db0f2e0c9284ae1bb8d003273c365630ba703e497fc13c49f8f227b85d8d0837efd635a7bfc7fb99ece7f65b6ee2ade29b886dd2409b7988"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe5c4a67a1ad4f01f}}}, 0x11c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(r4, 0x0, 0x24000001) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, 0x0, 0x40001) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, 0x0, 0x4000) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, 0x0, 0x4) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001640)={'bond0\x00', &(0x7f0000001580)=@ethtool_dump={0x3f, 0xae0c, 0x6}}) accept4$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14, 0x80000) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 2m25.164888908s ago: executing program 0 (id=4862): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x25, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) (async) r2 = socket(0x10, 0x3, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="1c0300002e00010003000000fcdbdf250b03f3800c00e5800800da00", @ANYRES32=0x0, @ANYBLOB="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"], 0x31c}], 0x1, 0x0, 0x0, 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) (async) r4 = socket$inet(0x2, 0x2, 0x1) getsockopt$MRT(r4, 0x0, 0xd0, 0x0, 0x0) shutdown(r3, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r5, 0x0) (async) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x1000}, @TCA_PIE_LIMIT={0x8, 0x2, 0x7}]}}]}, 0x40}}, 0x0) 2m24.229717108s ago: executing program 0 (id=4866): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="04000000040000000400000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x26, 0x301, 0x70bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f0000000240)=""/183, 0xb7}, {&(0x7f0000001380)=""/99, 0x63}, {&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000003440)=""/4102, 0x1006}, {&(0x7f0000000080)=""/15, 0xf}, {&(0x7f00000004c0)=""/248, 0xf8}, {&(0x7f00000006c0)=""/215, 0xd7}], 0x8}, 0x22120) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) 2m9.065421305s ago: executing program 33 (id=4866): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="04000000040000000400000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x26, 0x301, 0x70bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f0000000240)=""/183, 0xb7}, {&(0x7f0000001380)=""/99, 0x63}, {&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000003440)=""/4102, 0x1006}, {&(0x7f0000000080)=""/15, 0xf}, {&(0x7f00000004c0)=""/248, 0xf8}, {&(0x7f00000006c0)=""/215, 0xd7}], 0x8}, 0x22120) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) 1m27.8866587s ago: executing program 2 (id=5086): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000280)=0x68) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f00000003c0)=0x4, 0x4) sendmsg(r1, &(0x7f0000005c80)={&(0x7f0000005c00)=@in={0x2, 0x4e24, @empty}, 0x80, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000002400010026bd7000fcdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4008c}, 0x20000000) 1m27.499661475s ago: executing program 2 (id=5091): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x18) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000080)) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000140)=0x7, 0x4) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, 0x0) (async, rerun: 64) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='nv', 0x2) (async, rerun: 64) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) (async) syz_emit_ethernet(0x7f, &(0x7f0000000180)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x49, 0x3a, 0xff, @private1, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x8, '\x00', @mcast2, [{0x3, 0x6, "a9db1093788df1ffe4e7520ddd43a1e957733f694ccb6af45aecab51f1769c37922b43c6596410ab6ae96f6fe31cf9"}]}}}}}}, 0x0) 1m27.048528385s ago: executing program 2 (id=5094): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x8918, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x80, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ctinfo={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3991}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003500010000"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) (async, rerun: 64) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) (rerun: 64) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv6_delrule={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x1}]}, 0x24}}, 0x20000000) 1m26.728704968s ago: executing program 2 (id=5096): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x68, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_RATE={0x14, 0x6, {0xf4d, 0x1c13, 0x6, 0x80000f}}]}}}]}, 0x68}}, 0x0) sendto$packet(r1, &(0x7f0000000580)="44c394f305916c4516999da20800", 0x36, 0x0, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4c22, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="0800101d89b5eb00", 0x8}], 0x1}, 0x2400c880) 1m26.281860363s ago: executing program 2 (id=5097): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffea7, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB="b6c5af406650baa74d07e47bedae9bb07ea7b8df26a0196fd3ede64774bcf88bebffacef57cb055993181aee330155c3d2a9cc74bea06dcb479db88aad236067d46977297164817baf30714f388ab805e807fd5daf87340167f164ba665a0534b77c1169eaa9bab7522570cdd91537197b43c42b3779168eff4411d48aa0311a0113d47d32ae40f9f95d4ba49a24e92864e6a99c27af4f07ff6368dd167b92df1a61de4490c04c4a4c22e06f8cd04684e9601f5e320d76493cc21d091f007b04e1833feb91d7269c2c47982a51dec90430cfc7804ace749ce107c252737aa5496540f2"], 0x44}, 0x1, 0x0, 0x0, 0x8081}, 0x4000084) 1m25.740598055s ago: executing program 2 (id=5101): unshare(0x62000000) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000180), 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000040), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000e00)=@newtaction={0x36a0, 0x30, 0x4, 0x70bd25, 0x25dfdbfc, {}, [{0x111c, 0x1, [@m_xt={0xe8, 0xe, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x2a, 0x6, {0x6, 'filter\x00', 0xcf, 0xe066}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x5d, 0x6, "bf3c0d53098b162fc7c71f953918273c6441c721293a5a039291aaa7144812b623031e876e44e1c21ac9b09f6b5c0cf5219e2444ce06a2465ca733437b5db3d750fb1396823be93e6f4235f145137fb0678763adb8c6145caf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0x1030, 0x9, 0x0, 0x0, {{0xb}, {0x4}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0xfc, 0x1, [@m_ct={0x60, 0xd, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x2e, 0x6, "07a5494a8f75b0cd6fcd4822504d79cbc90aee33482ca85e0413127c96dae7c1243acc15524fdc56fa96"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x98, 0x1b, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x5, 0x3, 0x5c9}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xcf, 0x10000000, 0xffffc643, 0x7}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff7fff, 0xffff7fff, 0x20000000, 0xfffffff7, 0x6}, 0x7ff}}]}, {0x14, 0x6, "81d20dfc28390c0fce682d531b924adb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0x21f0, 0x1, [@m_police={0x21ec, 0xc, 0x0, 0x0, {{0xb}, {0x11c0, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x5da3, 0x0, 0x2, 0xd, 0xddb, {0x0, 0x0, 0xcd, 0x8001, 0x3ff, 0xfffffffa}, {0x4, 0x1, 0x7ff, 0xff13, 0x8, 0x401}, 0x7, 0x9, 0x3}}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3fde7293}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7679cb7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x1000, 0xffffff01, 0xffffffff, 0x8, 0x7, 0x5, 0x1, 0x3, 0xa000, 0x5, 0x7fffffff, 0x3, 0x3, 0x1000, 0x5487, 0x3, 0x9, 0x8f, 0x5, 0x8, 0x4b73, 0x9, 0x6, 0x4, 0x80, 0x80, 0x0, 0xd9b, 0x9, 0xee, 0xef21, 0x6, 0x6, 0x8, 0x6, 0x2f, 0x9c, 0x100, 0xffffffff, 0x3ff, 0x5, 0x6, 0x5, 0xd, 0x5, 0x937, 0xaada, 0x663, 0xfffffff9, 0x5, 0x4, 0x80000001, 0x3, 0x12add12e, 0x1, 0x200, 0xbeed, 0x7fa, 0xfff, 0x8, 0x4, 0x56c9, 0xc86a, 0x2, 0xb77c, 0xf29, 0x1, 0xcd, 0xff, 0x10, 0x9, 0x0, 0x6, 0xfffffffe, 0x10000, 0x8, 0x10, 0xfff, 0x5, 0x1000, 0x9, 0xfffffffb, 0x1, 0xd, 0x2, 0x9, 0x2e, 0x9, 0x9, 0x8001, 0x7, 0x0, 0x8e0c, 0x8, 0xad, 0x5, 0x1, 0x3, 0x5cf, 0x3, 0x5, 0x6, 0x4, 0x54e, 0x8, 0x9c73, 0x8, 0xfffffffb, 0x5c9, 0x6, 0x2, 0x3, 0x8000, 0x3, 0x8715, 0x900, 0x8, 0x8, 0x300, 0x9, 0xc0000000, 0x8, 0x7, 0x9, 0x3ff, 0x7fff, 0x7fffffff, 0x2, 0x6, 0xffffffc9, 0x7, 0x3, 0x80, 0xd, 0x4, 0x3e7b, 0x10001, 0x1, 0x64, 0x6, 0x0, 0xb, 0xffff, 0x3, 0x6, 0xfffff081, 0xc81, 0x1, 0x9327, 0xebf, 0xcb2, 0x7, 0x3, 0x2, 0x80000000, 0x2, 0xe2, 0x8a, 0x10, 0x0, 0x4, 0x8, 0x42, 0xffff, 0x8, 0x0, 0x9, 0x4, 0x5, 0x1, 0x2, 0x3, 0x8, 0x0, 0x8, 0x401, 0x0, 0x9, 0x8000, 0x5, 0x6, 0x7, 0x1, 0xffffffff, 0x10000, 0xfff, 0x2, 0x1, 0x400, 0xfffff889, 0x5, 0xddfc, 0x2, 0x2b, 0x4, 0x4, 0x0, 0x4148, 0x10000, 0x0, 0x80000000, 0x4, 0x1c000000, 0x40, 0x81, 0x43a0, 0x4, 0xfff, 0x8, 0x5, 0x1, 0x7, 0x8001, 0xf, 0x0, 0x8000, 0x5, 0x7, 0x1, 0x7, 0x3, 0x3, 0x7f, 0x6, 0x78c4a078, 0xc, 0x0, 0x4, 0x7fffffff, 0x4, 0x6, 0x2, 0x7, 0x9f, 0xffff9fd8, 0xf, 0x84dd, 0x8, 0x5e1, 0x6, 0x8, 0x8, 0x10000, 0xc25, 0x4, 0xb0a, 0x0, 0x85, 0x451, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0xb83, 0x8, 0xbb, {0x6, 0x0, 0x2, 0x81, 0x6, 0x4}, {0xa1, 0x1, 0x3f, 0x8, 0xa, 0xd1f9}, 0x0, 0x8, 0x4}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x40000000, 0x0, 0x1, 0x8001, 0x5, {0x4, 0x1, 0x8000, 0x5, 0x3, 0x5}, {0x6, 0x0, 0x8, 0x2, 0x80, 0x10}, 0x3, 0xffffff01, 0x7}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x4, 0xd, 0x9, 0x8, {0x6, 0x2, 0x7b2d, 0x2, 0xab0b, 0x9}, {0xa7, 0x2, 0x1, 0x6, 0xdf35, 0x1}, 0x5, 0x1, 0x2}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x100}], [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x101}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd94c}, @TCA_POLICE_RATE={0x404, 0x2, [0x24c, 0x3, 0x10b, 0x9e9, 0xffff, 0x38, 0x3, 0x7, 0x9, 0x5, 0x7f, 0x7, 0xa, 0x2, 0x81, 0xfff, 0x9, 0x6, 0x0, 0x5, 0x7, 0x8, 0x100, 0x10000, 0xffff, 0x7, 0x10, 0x6, 0x96, 0x3357, 0x127, 0x7, 0xb4, 0xb, 0x8, 0x1, 0xc00000, 0x0, 0x6, 0x20000, 0x2, 0x1, 0x6, 0x2, 0x5922, 0x1, 0x4, 0xe3a813b0, 0x81, 0x101, 0x8001, 0x534, 0x7, 0x33a, 0xfff, 0x3, 0x2, 0x4, 0x1ff, 0xc, 0x3ff, 0x5, 0x100, 0xf, 0x4b, 0x2, 0x7, 0x10, 0x5, 0x5, 0x2, 0x6, 0xfffff800, 0x800, 0x4, 0x4, 0x8, 0x1, 0x72, 0x427f, 0x8000, 0x82, 0x3, 0x49372f04, 0x3ff, 0x92bb, 0x5, 0x2, 0x0, 0x4f, 0x5, 0x200, 0xfb0, 0x200, 0x4, 0xddb6, 0x6, 0x368, 0x2, 0x10, 0x9, 0x7, 0x8, 0xfffffffe, 0x7ff, 0x6, 0x6, 0x2, 0xfda2, 0x6d1, 0x5, 0x4, 0x5, 0x3, 0x80, 0x5, 0x4, 0x401, 0x0, 0xe2f2, 0x5, 0x8, 0x7a, 0x9, 0x0, 0x0, 0x101, 0x0, 0x200, 0x9, 0x5, 0x2, 0xb, 0xd, 0x20, 0x1, 0x7, 0x8000, 0x6, 0x5, 0x1000, 0x10001, 0x2, 0xffffffff, 0x4, 0x10000, 0x2, 0x70c, 0x9, 0x7, 0x5, 0x3, 0x80000000, 0xa, 0x6, 0x0, 0xb5, 0xc72, 0x3, 0x80, 0x7, 0xea8, 0x0, 0x0, 0xfffffffb, 0x9, 0x42, 0x9, 0x4, 0x81, 0xef, 0x9, 0x5, 0xc951, 0x8, 0x2, 0x8, 0x66c1, 0x5, 0xe, 0x7, 0xffffffff, 0xffff, 0x5, 0x6e7, 0x4, 0x0, 0x8f15dbc, 0x5, 0xfb, 0x6, 0x401, 0x101, 0x6, 0x9, 0x200, 0x1, 0xc, 0x1, 0x5bd, 0x8, 0xfffff471, 0x81, 0xfffffffe, 0x6, 0x7, 0xfff, 0x8, 0x7, 0x16f, 0x4, 0x5, 0x9, 0x1000000, 0x40, 0x5, 0x401, 0x8eb, 0x500, 0x8, 0x8, 0x81, 0x7, 0x7, 0x2, 0xfffffffb, 0x0, 0x39b7, 0x8c, 0x4, 0x3, 0x6, 0x0, 0x6, 0x5, 0x6, 0x7, 0x400, 0x7, 0x583, 0x5c, 0xae35, 0x800, 0x5, 0x8, 0x1002, 0xc7f, 0x8, 0x2, 0x1, 0x1, 0x7, 0x6, 0xfffff801, 0x551, 0x15af]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0xff, 0xfffffffa, 0x800, 0xfffffc01, 0xfffffff7, 0x840a, 0x79, 0x2, 0x4, 0x61df, 0x8, 0x200, 0x1, 0xfff, 0x9, 0x7f, 0xa, 0x4, 0x1ff, 0xfffffff5, 0x10001, 0x7fffffff, 0x360, 0x4, 0x9d1b, 0x800, 0x6, 0x3, 0x7, 0x8, 0x10000, 0x11c, 0x93, 0x9, 0xfffffffa, 0x0, 0x8, 0x3, 0x401, 0x9, 0x7409, 0x28a, 0x7, 0xfffffff8, 0x1, 0x5, 0x8, 0x14000, 0x8, 0xfffffff9, 0x4, 0x7c, 0x5, 0x200, 0x9, 0xffffffff, 0xff97, 0x7, 0x3, 0x0, 0x3, 0x80000000, 0xf, 0x7fffffff, 0x7, 0x2, 0xfffffff8, 0xe, 0x1, 0x9, 0x3, 0x8, 0x81, 0x5, 0xff, 0x8cf, 0x1, 0x8, 0x0, 0x2, 0xfff, 0x3e30, 0xa99c, 0x0, 0x81, 0xad, 0x3, 0x1, 0x6, 0x541efb7c, 0x5, 0x4, 0x8001, 0x1000, 0x6f7, 0x7, 0x3, 0x8, 0xbd05, 0x4, 0x5, 0x3, 0xee1, 0x40, 0xfffffffc, 0x7, 0x3d38, 0x7fff, 0x5, 0x400, 0x8, 0x5, 0x685, 0x10001, 0x0, 0xb, 0x100, 0x40, 0x80000000, 0x9, 0x80, 0x40, 0x1, 0x9, 0x6, 0x4, 0x6, 0x5, 0x800, 0x1, 0x1, 0x9, 0x401, 0x0, 0x101, 0x0, 0x483f, 0x126b564a, 0x5, 0xfffffffa, 0xcea6, 0xdc, 0x5, 0x40, 0x9, 0x8, 0x8, 0x8, 0x7fffffff, 0x20083b98, 0x6, 0xc, 0x80, 0xe0, 0xcae8, 0x80000000, 0xfffffffd, 0x7f1, 0x1, 0x5, 0x401, 0x1, 0x5, 0x1, 0x6, 0x5, 0x3, 0x80, 0x0, 0x5, 0xd, 0xffff, 0x6, 0x7, 0x7, 0x81, 0x9, 0x3, 0xb, 0x1, 0x0, 0x0, 0xffff8001, 0x6, 0x2, 0x1000, 0x7, 0x7, 0x7, 0x5, 0x8001, 0x8, 0x6, 0x52, 0x8, 0x9, 0xa, 0xcf49, 0x8, 0x401, 0x2, 0x6, 0x1, 0x7, 0x6, 0x6, 0x0, 0x5, 0x0, 0x1ff, 0x4, 0x3, 0x10, 0x2, 0xdc, 0x1, 0xd1c, 0x6, 0x4, 0xb, 0x0, 0x7, 0x7ff, 0x6, 0x8bed, 0x2, 0x0, 0x5, 0x5, 0x4, 0x1000, 0x2, 0x5, 0x1, 0x5, 0x8, 0x8, 0x7f, 0x3, 0xde, 0x3aee, 0x2, 0x103, 0x9, 0x3, 0x2, 0x4, 0xae, 0x5, 0x0, 0x9, 0x1, 0x3, 0x6, 0x200]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x10, 0x0, 0x8, 0x8f, 0x4, 0x5ef9dc6f, 0x6, 0xe, 0x80000000, 0x6, 0x7, 0x7, 0x18b07dad, 0x0, 0x8, 0x5, 0x8, 0x7, 0x820f, 0x9, 0xe, 0xc0000, 0xfffffffe, 0x4, 0x0, 0x5, 0x0, 0x401, 0x3, 0x4, 0x4a, 0x200, 0xd8d, 0xffff, 0x4, 0x4, 0x3, 0x7, 0x4d8, 0x7, 0x7, 0x5, 0x7, 0x6, 0xffffffc0, 0x800, 0xf, 0x3, 0x6193e24f, 0xb, 0x0, 0x5, 0x8, 0xfffffff8, 0xd, 0x8, 0x3, 0x8, 0xae, 0x9, 0x9, 0x800, 0x1, 0x80000001, 0x7fffffff, 0x96a, 0xffff3fb5, 0x1, 0x3, 0x7cf, 0xde9, 0x3, 0x401, 0x5, 0x8001, 0x272b, 0x10001, 0x6, 0x101, 0x3fff8, 0x10001, 0xb7ed, 0x80, 0x4, 0xc4, 0x1301, 0x4, 0x12, 0xb, 0x7d, 0x7, 0x8, 0x8, 0xb6, 0x6, 0x8, 0x3, 0x8, 0x6, 0x4, 0x2, 0xfffffff8, 0x2, 0x9, 0x7fff, 0x2, 0xfffffffc, 0x2, 0x5, 0x4db, 0x8001, 0x2, 0x9, 0x7, 0x3, 0xffff627d, 0x7, 0x217, 0x7, 0x10000, 0x1, 0x9, 0x9, 0xf4, 0x7, 0x40, 0x0, 0xb5c7, 0x2400000, 0x7, 0x1, 0x3, 0x6, 0x3296, 0x5, 0x4, 0xf, 0x28f4, 0x6, 0x7, 0x93, 0x81, 0x4, 0x3ff, 0x4, 0xfffffeff, 0x6, 0x5d4, 0x2, 0x7ff, 0x4, 0x1, 0xa78, 0x1000, 0x0, 0x8, 0xd9, 0x4, 0x8, 0x1, 0x1000, 0x4, 0x0, 0x3, 0x2, 0x101, 0x6, 0x74ad, 0x5, 0x6, 0x4, 0x2, 0xffffffff, 0x9, 0x7, 0x8, 0x8001, 0xd257, 0xffffffff, 0x9924, 0x3a, 0xfffffffa, 0x7fff, 0xfffffffb, 0x3, 0xb97a, 0x9, 0x18, 0x8, 0x8, 0x6, 0x7, 0x800, 0xffffff5d, 0x3, 0x800000, 0x7fffffff, 0x3, 0xeb7b, 0x7, 0xf, 0x2, 0x5, 0x362, 0x8, 0x0, 0x1, 0x8, 0x2, 0x2, 0xffffaaa8, 0x5, 0x1, 0x2a, 0x10, 0xf909, 0x1, 0x7, 0x5f8, 0x6938, 0x1ff, 0xfffffff7, 0x9, 0x2, 0x2, 0xb45, 0x10000, 0x2, 0x8, 0x10000, 0xc3aa, 0xfffffffd, 0x17d, 0x4, 0x4, 0x7, 0x3, 0x10, 0x2, 0x47a7, 0x0, 0xfffffffa, 0xc, 0x5, 0x5, 0x8, 0x7f, 0x9679, 0xff, 0x9, 0x3, 0x9, 0x4, 0x0, 0x62]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x76, 0x0, 0x9, 0x800, 0xffffffff, {0x3f, 0x2, 0x8000, 0x6, 0x8, 0x5}, {0x4, 0x2, 0x1, 0x6, 0x536, 0x7185}, 0xa763, 0x4, 0xfffffffe}}]]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x4}, {0x280, 0x1, [@m_connmark={0xec, 0x19, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x8, 0x0, 0x3, 0x87c9}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10001, 0x13d, 0x7, 0x0, 0xe7}, 0x9}}]}, {0x84, 0x6, "0216391c9ae3345808db71e83407b3f392d0e090ce6838581263a46dadfbf873e16a5c0dc47e3cab92834f584b4b32429bce97e2dca636585351b8ed246e8b05e416476b63a359499f39aeb86ad374ecb704ec4f40675d84516d9c8610f1fe7f599b416b45cdb50149b4a959a024cc2d6d3d1fd96cc6ac9b4a2091540dd341ea"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x190, 0x18, 0x0, 0x0, {{0xb}, {0xa8, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xf, 0x8000, 0x0, 0x6, 0x70}, 0xd}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7f, 0xffffffff, 0x3, 0x8, 0x1}, 0x6}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}]}, {0xbf, 0x6, "82af96d54a0e06089ec716805a2452e55fe793fae2c83d7c003d040a43b631470b8e4777d2e7d5149d9993a653111cf7bcd42b504ff95b740f9cb3a135725d71a4fb2e0dbd81a6dcccecc4bb2cbd7a1cdb2316e5736776d60d6f263ee1ba6dbe14b9161d87ed06d0ed1981abd507039e8dd97231fb026f5ed3cc7ff42b1ac4d851dc5f427241ddb529c84305c0f21249e3c78698a2d21e1ada5ebbab7ea408b48544dce8f26f1cdf26f899977421cb857e1c7bd9e598398d43db9e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x36a0}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES8=r5], 0x44}}, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r3, &(0x7f0000000200)=ANY=[], 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bac0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="1b", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) r7 = socket$inet6(0xa, 0x80001, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x80000) sendmsg$NL80211_CMD_DEL_INTERFACE(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x65}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x1) getsockopt$bt_hci(r7, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x8607, 0x0, 0x0, 0xa1}, 0xfec3) sendmsg$unix(r5, &(0x7f0000000dc0)={&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000680)="19dd7f038b7e4b2c5bb28fc48eaa26179ce812baf33ac32d2d840e453cbc8d82175e7ebb859fc5c9328eda68df70bcfddb485ebc00e12a7e711abd19c5b9081df5fb3623ac401cc3d40f89c966c4e14335e6609e60fa570c", 0x58}, {&(0x7f0000000880)="cc45847c627d901949e1231e3e4ef3096c1c3ddcb4d089fcbc5f501f1f7b1f50339764a2e1d95fb758717e64c372b263b16cd88aaef112133dc3314ed466c07251412da5e0025b86b45bad40aecaf65b93f3d34931278572a3195e3402ad845d5ea697a7e581af968e63bbf1bcaf9fe3d28c1f7879bb432eeaf38fa3808936e0a909c95f19977e828fe286c0d1368a65408089b9f002e331e6eacf1229e833d83ba6a5635a51bc5125466a6a784e5ae2665558da84cb113cdb174da0b434727d2fb528e593db210b4dc86210c06ce141db49e2a52bbd91e6065a52d295a958ca979da89b14b511de4fbc1e86933975", 0xef}, {&(0x7f0000000980)="71f93066532fa9a132b17161a572a25602b32f416d186f0a176fe253042128c45c22db622d83b15a2f212c215362c8a4c7c52c0576f1035f8ede23a094c76e94aced29ade469773248eea100589ebf789b4220d5a1b905aeab8bbcf480f0ce9b38042a42f89e4c05c5c4face6a01abc75e514a3a982631a68f191d13f6cd0dc87511d4932179737a62d064a81de8010c31e2", 0x92}, {&(0x7f0000000a40)="6517af8004059af0ba873a9c29023e0285c862a0fd47fd000c0ae831b787f47124f10d95b5613d1f8bc40f914e9cb316e19599639e100923d02c388132ef", 0x3e}], 0x4, &(0x7f0000000cc0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r3]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [r2, r2, 0xffffffffffffffff, r7, r4, r8, r4, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8, 0x40801}, 0x91) sendmsg$nl_generic(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4}]}, 0x20}}, 0x8000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)={0x2, 'vlan1\x00', {0x9}, 0x2}) 1m10.57927564s ago: executing program 34 (id=5101): unshare(0x62000000) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000180), 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000040), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000e00)=@newtaction={0x36a0, 0x30, 0x4, 0x70bd25, 0x25dfdbfc, {}, [{0x111c, 0x1, [@m_xt={0xe8, 0xe, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x2a, 0x6, {0x6, 'filter\x00', 0xcf, 0xe066}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x5d, 0x6, "bf3c0d53098b162fc7c71f953918273c6441c721293a5a039291aaa7144812b623031e876e44e1c21ac9b09f6b5c0cf5219e2444ce06a2465ca733437b5db3d750fb1396823be93e6f4235f145137fb0678763adb8c6145caf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0x1030, 0x9, 0x0, 0x0, {{0xb}, {0x4}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0xfc, 0x1, [@m_ct={0x60, 0xd, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x2e, 0x6, "07a5494a8f75b0cd6fcd4822504d79cbc90aee33482ca85e0413127c96dae7c1243acc15524fdc56fa96"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x98, 0x1b, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x5, 0x3, 0x5c9}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xcf, 0x10000000, 0xffffc643, 0x7}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff7fff, 0xffff7fff, 0x20000000, 0xfffffff7, 0x6}, 0x7ff}}]}, {0x14, 0x6, "81d20dfc28390c0fce682d531b924adb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0x21f0, 0x1, [@m_police={0x21ec, 0xc, 0x0, 0x0, {{0xb}, {0x11c0, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x5da3, 0x0, 0x2, 0xd, 0xddb, {0x0, 0x0, 0xcd, 0x8001, 0x3ff, 0xfffffffa}, {0x4, 0x1, 0x7ff, 0xff13, 0x8, 0x401}, 0x7, 0x9, 0x3}}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3fde7293}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7679cb7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x1000, 0xffffff01, 0xffffffff, 0x8, 0x7, 0x5, 0x1, 0x3, 0xa000, 0x5, 0x7fffffff, 0x3, 0x3, 0x1000, 0x5487, 0x3, 0x9, 0x8f, 0x5, 0x8, 0x4b73, 0x9, 0x6, 0x4, 0x80, 0x80, 0x0, 0xd9b, 0x9, 0xee, 0xef21, 0x6, 0x6, 0x8, 0x6, 0x2f, 0x9c, 0x100, 0xffffffff, 0x3ff, 0x5, 0x6, 0x5, 0xd, 0x5, 0x937, 0xaada, 0x663, 0xfffffff9, 0x5, 0x4, 0x80000001, 0x3, 0x12add12e, 0x1, 0x200, 0xbeed, 0x7fa, 0xfff, 0x8, 0x4, 0x56c9, 0xc86a, 0x2, 0xb77c, 0xf29, 0x1, 0xcd, 0xff, 0x10, 0x9, 0x0, 0x6, 0xfffffffe, 0x10000, 0x8, 0x10, 0xfff, 0x5, 0x1000, 0x9, 0xfffffffb, 0x1, 0xd, 0x2, 0x9, 0x2e, 0x9, 0x9, 0x8001, 0x7, 0x0, 0x8e0c, 0x8, 0xad, 0x5, 0x1, 0x3, 0x5cf, 0x3, 0x5, 0x6, 0x4, 0x54e, 0x8, 0x9c73, 0x8, 0xfffffffb, 0x5c9, 0x6, 0x2, 0x3, 0x8000, 0x3, 0x8715, 0x900, 0x8, 0x8, 0x300, 0x9, 0xc0000000, 0x8, 0x7, 0x9, 0x3ff, 0x7fff, 0x7fffffff, 0x2, 0x6, 0xffffffc9, 0x7, 0x3, 0x80, 0xd, 0x4, 0x3e7b, 0x10001, 0x1, 0x64, 0x6, 0x0, 0xb, 0xffff, 0x3, 0x6, 0xfffff081, 0xc81, 0x1, 0x9327, 0xebf, 0xcb2, 0x7, 0x3, 0x2, 0x80000000, 0x2, 0xe2, 0x8a, 0x10, 0x0, 0x4, 0x8, 0x42, 0xffff, 0x8, 0x0, 0x9, 0x4, 0x5, 0x1, 0x2, 0x3, 0x8, 0x0, 0x8, 0x401, 0x0, 0x9, 0x8000, 0x5, 0x6, 0x7, 0x1, 0xffffffff, 0x10000, 0xfff, 0x2, 0x1, 0x400, 0xfffff889, 0x5, 0xddfc, 0x2, 0x2b, 0x4, 0x4, 0x0, 0x4148, 0x10000, 0x0, 0x80000000, 0x4, 0x1c000000, 0x40, 0x81, 0x43a0, 0x4, 0xfff, 0x8, 0x5, 0x1, 0x7, 0x8001, 0xf, 0x0, 0x8000, 0x5, 0x7, 0x1, 0x7, 0x3, 0x3, 0x7f, 0x6, 0x78c4a078, 0xc, 0x0, 0x4, 0x7fffffff, 0x4, 0x6, 0x2, 0x7, 0x9f, 0xffff9fd8, 0xf, 0x84dd, 0x8, 0x5e1, 0x6, 0x8, 0x8, 0x10000, 0xc25, 0x4, 0xb0a, 0x0, 0x85, 0x451, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0xb83, 0x8, 0xbb, {0x6, 0x0, 0x2, 0x81, 0x6, 0x4}, {0xa1, 0x1, 0x3f, 0x8, 0xa, 0xd1f9}, 0x0, 0x8, 0x4}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x40000000, 0x0, 0x1, 0x8001, 0x5, {0x4, 0x1, 0x8000, 0x5, 0x3, 0x5}, {0x6, 0x0, 0x8, 0x2, 0x80, 0x10}, 0x3, 0xffffff01, 0x7}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x4, 0xd, 0x9, 0x8, {0x6, 0x2, 0x7b2d, 0x2, 0xab0b, 0x9}, {0xa7, 0x2, 0x1, 0x6, 0xdf35, 0x1}, 0x5, 0x1, 0x2}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x100}], [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x101}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd94c}, @TCA_POLICE_RATE={0x404, 0x2, [0x24c, 0x3, 0x10b, 0x9e9, 0xffff, 0x38, 0x3, 0x7, 0x9, 0x5, 0x7f, 0x7, 0xa, 0x2, 0x81, 0xfff, 0x9, 0x6, 0x0, 0x5, 0x7, 0x8, 0x100, 0x10000, 0xffff, 0x7, 0x10, 0x6, 0x96, 0x3357, 0x127, 0x7, 0xb4, 0xb, 0x8, 0x1, 0xc00000, 0x0, 0x6, 0x20000, 0x2, 0x1, 0x6, 0x2, 0x5922, 0x1, 0x4, 0xe3a813b0, 0x81, 0x101, 0x8001, 0x534, 0x7, 0x33a, 0xfff, 0x3, 0x2, 0x4, 0x1ff, 0xc, 0x3ff, 0x5, 0x100, 0xf, 0x4b, 0x2, 0x7, 0x10, 0x5, 0x5, 0x2, 0x6, 0xfffff800, 0x800, 0x4, 0x4, 0x8, 0x1, 0x72, 0x427f, 0x8000, 0x82, 0x3, 0x49372f04, 0x3ff, 0x92bb, 0x5, 0x2, 0x0, 0x4f, 0x5, 0x200, 0xfb0, 0x200, 0x4, 0xddb6, 0x6, 0x368, 0x2, 0x10, 0x9, 0x7, 0x8, 0xfffffffe, 0x7ff, 0x6, 0x6, 0x2, 0xfda2, 0x6d1, 0x5, 0x4, 0x5, 0x3, 0x80, 0x5, 0x4, 0x401, 0x0, 0xe2f2, 0x5, 0x8, 0x7a, 0x9, 0x0, 0x0, 0x101, 0x0, 0x200, 0x9, 0x5, 0x2, 0xb, 0xd, 0x20, 0x1, 0x7, 0x8000, 0x6, 0x5, 0x1000, 0x10001, 0x2, 0xffffffff, 0x4, 0x10000, 0x2, 0x70c, 0x9, 0x7, 0x5, 0x3, 0x80000000, 0xa, 0x6, 0x0, 0xb5, 0xc72, 0x3, 0x80, 0x7, 0xea8, 0x0, 0x0, 0xfffffffb, 0x9, 0x42, 0x9, 0x4, 0x81, 0xef, 0x9, 0x5, 0xc951, 0x8, 0x2, 0x8, 0x66c1, 0x5, 0xe, 0x7, 0xffffffff, 0xffff, 0x5, 0x6e7, 0x4, 0x0, 0x8f15dbc, 0x5, 0xfb, 0x6, 0x401, 0x101, 0x6, 0x9, 0x200, 0x1, 0xc, 0x1, 0x5bd, 0x8, 0xfffff471, 0x81, 0xfffffffe, 0x6, 0x7, 0xfff, 0x8, 0x7, 0x16f, 0x4, 0x5, 0x9, 0x1000000, 0x40, 0x5, 0x401, 0x8eb, 0x500, 0x8, 0x8, 0x81, 0x7, 0x7, 0x2, 0xfffffffb, 0x0, 0x39b7, 0x8c, 0x4, 0x3, 0x6, 0x0, 0x6, 0x5, 0x6, 0x7, 0x400, 0x7, 0x583, 0x5c, 0xae35, 0x800, 0x5, 0x8, 0x1002, 0xc7f, 0x8, 0x2, 0x1, 0x1, 0x7, 0x6, 0xfffff801, 0x551, 0x15af]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0xff, 0xfffffffa, 0x800, 0xfffffc01, 0xfffffff7, 0x840a, 0x79, 0x2, 0x4, 0x61df, 0x8, 0x200, 0x1, 0xfff, 0x9, 0x7f, 0xa, 0x4, 0x1ff, 0xfffffff5, 0x10001, 0x7fffffff, 0x360, 0x4, 0x9d1b, 0x800, 0x6, 0x3, 0x7, 0x8, 0x10000, 0x11c, 0x93, 0x9, 0xfffffffa, 0x0, 0x8, 0x3, 0x401, 0x9, 0x7409, 0x28a, 0x7, 0xfffffff8, 0x1, 0x5, 0x8, 0x14000, 0x8, 0xfffffff9, 0x4, 0x7c, 0x5, 0x200, 0x9, 0xffffffff, 0xff97, 0x7, 0x3, 0x0, 0x3, 0x80000000, 0xf, 0x7fffffff, 0x7, 0x2, 0xfffffff8, 0xe, 0x1, 0x9, 0x3, 0x8, 0x81, 0x5, 0xff, 0x8cf, 0x1, 0x8, 0x0, 0x2, 0xfff, 0x3e30, 0xa99c, 0x0, 0x81, 0xad, 0x3, 0x1, 0x6, 0x541efb7c, 0x5, 0x4, 0x8001, 0x1000, 0x6f7, 0x7, 0x3, 0x8, 0xbd05, 0x4, 0x5, 0x3, 0xee1, 0x40, 0xfffffffc, 0x7, 0x3d38, 0x7fff, 0x5, 0x400, 0x8, 0x5, 0x685, 0x10001, 0x0, 0xb, 0x100, 0x40, 0x80000000, 0x9, 0x80, 0x40, 0x1, 0x9, 0x6, 0x4, 0x6, 0x5, 0x800, 0x1, 0x1, 0x9, 0x401, 0x0, 0x101, 0x0, 0x483f, 0x126b564a, 0x5, 0xfffffffa, 0xcea6, 0xdc, 0x5, 0x40, 0x9, 0x8, 0x8, 0x8, 0x7fffffff, 0x20083b98, 0x6, 0xc, 0x80, 0xe0, 0xcae8, 0x80000000, 0xfffffffd, 0x7f1, 0x1, 0x5, 0x401, 0x1, 0x5, 0x1, 0x6, 0x5, 0x3, 0x80, 0x0, 0x5, 0xd, 0xffff, 0x6, 0x7, 0x7, 0x81, 0x9, 0x3, 0xb, 0x1, 0x0, 0x0, 0xffff8001, 0x6, 0x2, 0x1000, 0x7, 0x7, 0x7, 0x5, 0x8001, 0x8, 0x6, 0x52, 0x8, 0x9, 0xa, 0xcf49, 0x8, 0x401, 0x2, 0x6, 0x1, 0x7, 0x6, 0x6, 0x0, 0x5, 0x0, 0x1ff, 0x4, 0x3, 0x10, 0x2, 0xdc, 0x1, 0xd1c, 0x6, 0x4, 0xb, 0x0, 0x7, 0x7ff, 0x6, 0x8bed, 0x2, 0x0, 0x5, 0x5, 0x4, 0x1000, 0x2, 0x5, 0x1, 0x5, 0x8, 0x8, 0x7f, 0x3, 0xde, 0x3aee, 0x2, 0x103, 0x9, 0x3, 0x2, 0x4, 0xae, 0x5, 0x0, 0x9, 0x1, 0x3, 0x6, 0x200]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x10, 0x0, 0x8, 0x8f, 0x4, 0x5ef9dc6f, 0x6, 0xe, 0x80000000, 0x6, 0x7, 0x7, 0x18b07dad, 0x0, 0x8, 0x5, 0x8, 0x7, 0x820f, 0x9, 0xe, 0xc0000, 0xfffffffe, 0x4, 0x0, 0x5, 0x0, 0x401, 0x3, 0x4, 0x4a, 0x200, 0xd8d, 0xffff, 0x4, 0x4, 0x3, 0x7, 0x4d8, 0x7, 0x7, 0x5, 0x7, 0x6, 0xffffffc0, 0x800, 0xf, 0x3, 0x6193e24f, 0xb, 0x0, 0x5, 0x8, 0xfffffff8, 0xd, 0x8, 0x3, 0x8, 0xae, 0x9, 0x9, 0x800, 0x1, 0x80000001, 0x7fffffff, 0x96a, 0xffff3fb5, 0x1, 0x3, 0x7cf, 0xde9, 0x3, 0x401, 0x5, 0x8001, 0x272b, 0x10001, 0x6, 0x101, 0x3fff8, 0x10001, 0xb7ed, 0x80, 0x4, 0xc4, 0x1301, 0x4, 0x12, 0xb, 0x7d, 0x7, 0x8, 0x8, 0xb6, 0x6, 0x8, 0x3, 0x8, 0x6, 0x4, 0x2, 0xfffffff8, 0x2, 0x9, 0x7fff, 0x2, 0xfffffffc, 0x2, 0x5, 0x4db, 0x8001, 0x2, 0x9, 0x7, 0x3, 0xffff627d, 0x7, 0x217, 0x7, 0x10000, 0x1, 0x9, 0x9, 0xf4, 0x7, 0x40, 0x0, 0xb5c7, 0x2400000, 0x7, 0x1, 0x3, 0x6, 0x3296, 0x5, 0x4, 0xf, 0x28f4, 0x6, 0x7, 0x93, 0x81, 0x4, 0x3ff, 0x4, 0xfffffeff, 0x6, 0x5d4, 0x2, 0x7ff, 0x4, 0x1, 0xa78, 0x1000, 0x0, 0x8, 0xd9, 0x4, 0x8, 0x1, 0x1000, 0x4, 0x0, 0x3, 0x2, 0x101, 0x6, 0x74ad, 0x5, 0x6, 0x4, 0x2, 0xffffffff, 0x9, 0x7, 0x8, 0x8001, 0xd257, 0xffffffff, 0x9924, 0x3a, 0xfffffffa, 0x7fff, 0xfffffffb, 0x3, 0xb97a, 0x9, 0x18, 0x8, 0x8, 0x6, 0x7, 0x800, 0xffffff5d, 0x3, 0x800000, 0x7fffffff, 0x3, 0xeb7b, 0x7, 0xf, 0x2, 0x5, 0x362, 0x8, 0x0, 0x1, 0x8, 0x2, 0x2, 0xffffaaa8, 0x5, 0x1, 0x2a, 0x10, 0xf909, 0x1, 0x7, 0x5f8, 0x6938, 0x1ff, 0xfffffff7, 0x9, 0x2, 0x2, 0xb45, 0x10000, 0x2, 0x8, 0x10000, 0xc3aa, 0xfffffffd, 0x17d, 0x4, 0x4, 0x7, 0x3, 0x10, 0x2, 0x47a7, 0x0, 0xfffffffa, 0xc, 0x5, 0x5, 0x8, 0x7f, 0x9679, 0xff, 0x9, 0x3, 0x9, 0x4, 0x0, 0x62]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x76, 0x0, 0x9, 0x800, 0xffffffff, {0x3f, 0x2, 0x8000, 0x6, 0x8, 0x5}, {0x4, 0x2, 0x1, 0x6, 0x536, 0x7185}, 0xa763, 0x4, 0xfffffffe}}]]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x4}, {0x280, 0x1, [@m_connmark={0xec, 0x19, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x8, 0x0, 0x3, 0x87c9}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10001, 0x13d, 0x7, 0x0, 0xe7}, 0x9}}]}, {0x84, 0x6, "0216391c9ae3345808db71e83407b3f392d0e090ce6838581263a46dadfbf873e16a5c0dc47e3cab92834f584b4b32429bce97e2dca636585351b8ed246e8b05e416476b63a359499f39aeb86ad374ecb704ec4f40675d84516d9c8610f1fe7f599b416b45cdb50149b4a959a024cc2d6d3d1fd96cc6ac9b4a2091540dd341ea"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x190, 0x18, 0x0, 0x0, {{0xb}, {0xa8, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xf, 0x8000, 0x0, 0x6, 0x70}, 0xd}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7f, 0xffffffff, 0x3, 0x8, 0x1}, 0x6}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}]}, {0xbf, 0x6, "82af96d54a0e06089ec716805a2452e55fe793fae2c83d7c003d040a43b631470b8e4777d2e7d5149d9993a653111cf7bcd42b504ff95b740f9cb3a135725d71a4fb2e0dbd81a6dcccecc4bb2cbd7a1cdb2316e5736776d60d6f263ee1ba6dbe14b9161d87ed06d0ed1981abd507039e8dd97231fb026f5ed3cc7ff42b1ac4d851dc5f427241ddb529c84305c0f21249e3c78698a2d21e1ada5ebbab7ea408b48544dce8f26f1cdf26f899977421cb857e1c7bd9e598398d43db9e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x36a0}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES8=r5], 0x44}}, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r3, &(0x7f0000000200)=ANY=[], 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bac0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="1b", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) r7 = socket$inet6(0xa, 0x80001, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x80000) sendmsg$NL80211_CMD_DEL_INTERFACE(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x65}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x1) getsockopt$bt_hci(r7, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x8607, 0x0, 0x0, 0xa1}, 0xfec3) sendmsg$unix(r5, &(0x7f0000000dc0)={&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000680)="19dd7f038b7e4b2c5bb28fc48eaa26179ce812baf33ac32d2d840e453cbc8d82175e7ebb859fc5c9328eda68df70bcfddb485ebc00e12a7e711abd19c5b9081df5fb3623ac401cc3d40f89c966c4e14335e6609e60fa570c", 0x58}, {&(0x7f0000000880)="cc45847c627d901949e1231e3e4ef3096c1c3ddcb4d089fcbc5f501f1f7b1f50339764a2e1d95fb758717e64c372b263b16cd88aaef112133dc3314ed466c07251412da5e0025b86b45bad40aecaf65b93f3d34931278572a3195e3402ad845d5ea697a7e581af968e63bbf1bcaf9fe3d28c1f7879bb432eeaf38fa3808936e0a909c95f19977e828fe286c0d1368a65408089b9f002e331e6eacf1229e833d83ba6a5635a51bc5125466a6a784e5ae2665558da84cb113cdb174da0b434727d2fb528e593db210b4dc86210c06ce141db49e2a52bbd91e6065a52d295a958ca979da89b14b511de4fbc1e86933975", 0xef}, {&(0x7f0000000980)="71f93066532fa9a132b17161a572a25602b32f416d186f0a176fe253042128c45c22db622d83b15a2f212c215362c8a4c7c52c0576f1035f8ede23a094c76e94aced29ade469773248eea100589ebf789b4220d5a1b905aeab8bbcf480f0ce9b38042a42f89e4c05c5c4face6a01abc75e514a3a982631a68f191d13f6cd0dc87511d4932179737a62d064a81de8010c31e2", 0x92}, {&(0x7f0000000a40)="6517af8004059af0ba873a9c29023e0285c862a0fd47fd000c0ae831b787f47124f10d95b5613d1f8bc40f914e9cb316e19599639e100923d02c388132ef", 0x3e}], 0x4, &(0x7f0000000cc0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r3]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [r2, r2, 0xffffffffffffffff, r7, r4, r8, r4, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8, 0x40801}, 0x91) sendmsg$nl_generic(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4}]}, 0x20}}, 0x8000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)={0x2, 'vlan1\x00', {0x9}, 0x2}) 14.452709256s ago: executing program 3 (id=5781): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000240)={'lo\x00', 0x400}) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000080)=0x2, 0x4) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r3, 0x89eb, 0x0) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0xfffffffe, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x0, 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth0_to_bridge\x00', 0x600}) 13.645549785s ago: executing program 3 (id=5788): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_delroute={0x24, 0x19, 0x4, 0x70bd29, 0x25dfdbfb, {0x2, 0x20, 0x10, 0x9, 0xfc, 0x2, 0xfd, 0x4, 0x1f00}, [@RTA_PREFSRC={0x8, 0x7, @rand_addr=0x64010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000894}, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000300)={r1, @in={{0x2, 0x4e23, @private=0xa010101}}, 0x7, 0xedd}, &(0x7f00000003c0)=0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000000d05040000000000000000020000000400188024000180140001800800010970901d69ec73e000e00000010c00028005000100000000001c000f80080002400001000008000140000000000800034000800000"], 0x58}}, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000480)={'wlan0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x1}}) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r1, 0x3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5c}, 0x48) 12.540473622s ago: executing program 3 (id=5800): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x217822d50771247f}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x4, 0x3}}, 0x2e) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac5500000000030006000000000002008e34000000000000000000000000020001000000000000000a1600000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000200)={0x1, 0xff, 0x6}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x241) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x28, 0xe000}, 0x5}], 0x1, 0x0) listen(r7, 0xfffffffc) 12.354022925s ago: executing program 3 (id=5805): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000002030300000000001a00000000000010"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005f00000000f80000000000000001", @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.616068535s ago: executing program 1 (id=5845): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) unshare(0x24020400) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r5, 0x0, 0x0}, 0x10) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000007e00), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000007f00)={0x0, 0x0, &(0x7f0000007ec0)={&(0x7f0000007e80)={0x20, r6, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYRES64=r6, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r0], 0x158}, 0x1, 0xba01}, 0x4008854) close(0xffffffffffffffff) 4.517396726s ago: executing program 1 (id=5853): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x8, 0x4007}, @mss={0x2, 0xd81d}, @mss={0x2, 0xc0}, @sack_perm, @timestamp, @sack_perm, @sack_perm], 0x8) sendto$inet(r0, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000380)='x', 0x1, 0x480c1, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x4) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c4b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 4.308887791s ago: executing program 1 (id=5856): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r3 = gettid() r4 = getgid() ioctl$OCFS2_IOC_UNRESVSP(r2, 0x40305829, &(0x7f00000002c0)={0x1, 0x1, 0x3ae, 0xf8b3, 0x0, 0xfffffffd}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={r3, 0xee00, r4}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000480), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xac2f}]}, 0x64}, 0x1, 0x0, 0x0, 0x404c896}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000100)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14f0b66000000002005b000000f4f94023958973b600083bf1a3ca7ca726b8b2fd1b5b0c1aad490df84eb011ddada04d66d9b21507333a24e73f425a4a6655a746da0763cc1c87fe9639a85c93e0e3c5a8d9a01dcb1f473266f39ff34f7d3223941128"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001014d9ec38bd7000fcd9df25080003006d000000080001000000000008004b001300000008004a"], 0x30}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004094) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x20, r11, 0x301, 0x0, 0x0, {0x2b}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20002041}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000002400010026bd7000fcdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4008c}, 0x20000000) 4.15659605s ago: executing program 7 (id=5859): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r1, 0x204, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x404c011) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r3, r4}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001200010400000000000000000000ffff", @ANYBLOB="00000000000000001c001280090001007866726d000000000c0002800800020003000000140003"], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x0, 0x25dfdbfe}, 0x14}}, 0x80) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r10) sendmsg$NL802154_CMD_NEW_INTERFACE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, r11, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x100}, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000081a000fe000000009500000000000000fbebdd9c86bd54ceab91c9b5c0202d2b8dd2bffe3533f2b2ea9586a6756b4afd8cfbec735f9ed713f2ab91b62e25d792a97f91a3ab0d95dad5f90c460127fd289ddfb4eb85ecf2069866afa46b2021290162448ac76afe97b0a881076a87bb472f2c6b2e2a5bd4f6a45a530415"], &(0x7f0000001c40)='syzkaller\x00', 0xf}, 0x90) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xa, 0x8dfd, 0x505, 0x0, 0x8, 0xf, 0x9}}, {0x16, 0x2, [0x400, 0x1, 0x4, 0xe89, 0x2, 0x3, 0x3, 0x9, 0x8]}}, {{0x1c, 0x1, {0x92, 0x36, 0x0, 0x7, 0x0, 0x1000, 0xb}}, {0x4}}]}]}, 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0800000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000000100005d2bdb5176ffe70f2f99f300000000800000000000"], 0x48) sendmsg$nl_route(r7, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@RTM_NEWMDB={0x58, 0x54, 0x100, 0x6, 0x25dfdbfd, {0x7, r12}, [@MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x0, 0x3, 0x2, {@in6_addr=@mcast1, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x1, 0x3, 0x4, {@ip4=@dev={0xac, 0x14, 0x14, 0x25}}}}]}, 0x58}}, 0x4000000) syz_emit_ethernet(0xf7, &(0x7f0000001fc0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4a3ff2", 0xc1, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x14}, {"d77010bccc638e41d335ff361ce886173572c1c6089e36cd551c13256174146b9ec3297ed6f7e4e855a2a473476a1f8f7842a7b9d5baa28f23d342e9d4c3ca479f46646411f3ae97c5c20a618be50ed5efa2acc9ffa20881cdb562d8d2afc05cc12d32916de708b279c53a377fb7e598643430e476a62642336ec479540ecc7239330f6ca802f72bd956c845bff0ad0116e6c290ba25c4833c826f5d1b2f16151638e676e08ef63a200e503f04"}}}}}}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0083e88803ec8c9b00"/24, @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf254f00000008000300", @ANYRES32=r5, @ANYBLOB="30007a8014000100338e4224df5d6314ab106bad3fddc35d0c00030075f7b7b9885d03be0c00030093300581dad340fb"], 0x4c}, 0x1, 0x0, 0x0, 0x24008050}, 0x4) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000b00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000840)={0x228, r1, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x4d}}}}, [@NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0xffff}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x31}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff29}]}, @NL80211_ATTR_MESH_SETUP={0xf8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_IE={0xcc, 0x3, "8073cc729d354462a1e593f9fc9e6cdfb135082202d81016106962c273d10c2865abeab52e547c935f1322132e77d37d822c2e10430056f9ff943f12074e691621d445bf2657d39cecf5cd3b086e433687b1c1d53f642b6279c4cf1b493fc54b08e73a0b04f30e271b96810cb2c33256edb0640d272d70daf4aa38f67a6ef314c735d8291182db9f698d63114d412433e8eb3d7fa323d1b759252b98911c4ec657521f75540953c43b8f2df4579e876bba8537d78d75f17e8791ba3b9f3289a521db8b235d3dd874"}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x10000}, @NL80211_ATTR_TX_RATES={0xc8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x81, 0x8, 0x1, 0x1000, 0xf, 0x7, 0x2]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xa, 0x5, 0x9, 0x8, 0xb5b, 0x0, 0x1ff]}}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xb, 0x456f, 0x4, 0x8, 0x0, 0x1, 0x714]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x1ff, 0x9, 0xfffa, 0x4, 0x6, 0x3, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x39, 0x1169, 0x39a, 0x7, 0x9, 0x1, 0x7, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfe00, 0x5, 0x5, 0xf13, 0x220, 0x2, 0x101, 0x5]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x1, 0x3}, {0x1}, {0x4}, {0x2, 0x3}, {0x3, 0x2}, {0x3, 0x7}, {0x7, 0xa}, {0x6, 0x9}, {0x4, 0x8}, {0x5, 0x8}, {0x4}, {0x6, 0x8}, {0x5, 0x4}, {0x3, 0x4}]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0xfffc, 0x9, 0x8, 0x1, 0x3, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x20004090}, 0x4040894) 4.151482516s ago: executing program 1 (id=5860): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000040)=0x14, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x3c}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x14, 0x4, 0x4, 0x23, 0x84c983d4e8447ea8}, 0x50) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r4}, 0x20) unshare(0x6a040000) r5 = socket(0x8, 0x3, 0x3) ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_netrom_SIOCADDRT(r5, 0x6180, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x10, 0x9, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000480)="c1", 0x1}], 0x1}}], 0x1, 0x200400c0) 3.840778295s ago: executing program 7 (id=5862): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x40, 0x20, 0x6, 0x6, {{0xb, 0x4, 0x2, 0x4, 0x2c, 0x67, 0x0, 0x8, 0x29, 0x0, @private=0xa010100, @multicast1, {[@rr={0x7, 0x17, 0x31, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @multicast2]}]}}}}}) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000480)={@multicast2, @broadcast}, &(0x7f00000004c0)=0xc) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=@ipv4_newrule={0x1c, 0x20, 0x800, 0x70bd25, 0x25dfdbfe, {0x2, 0x0, 0x20, 0x5, 0x80, 0x0, 0x0, 0x8, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x40894) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r2, 0x215eb000) pipe(&(0x7f00000001c0)) r4 = socket(0x14, 0x2, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\trmr'], 0xa) ioctl$sock_SIOCGIFINDEX(r4, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2004c8a1}, 0x8000) sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES16=r4], 0xa4}, 0x1, 0x0, 0x0, 0x805}, 0x801) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x91}]}, 0x44}}, 0x0) 2.56858986s ago: executing program 7 (id=5869): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r2, 0x0) bind$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2710, @host}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000002400010026bd7000fcdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4008c}, 0x20000000) 2.337997037s ago: executing program 7 (id=5871): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x41, 0xb9, 0x7, 0x3, 0x1, 0x0, 0x8, 0x2}}, {0x8, 0x2, [0x9, 0x3]}}]}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1, 0x8, 0x2}, {0x0, 0xef}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14004880}, 0x2000d8d0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01183ebe5100000000000c0000000c0000000200060400"/38], 0x0, 0x26, 0x0, 0x1}, 0x28) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x50, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x44840}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2.2296078s ago: executing program 6 (id=5872): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="ad43000000000000600004"], 0x14}}, 0x0) (async, rerun: 64) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x1b, 0x89, &(0x7f0000000080)="f2f2e9eb4e812201fb99059a8416e7786fdc79b3d5418d42fd0860", &(0x7f00000000c0)=""/137, 0x1, 0x0, 0x8c, 0xc2, &(0x7f0000000180)="866c971ad703396aaa39f790c9e0e27065222dedd60c7608494e6825bca95b70a6b9598e4b1f64e6f5eadd7b74b974ad8f38985369c1214a6539593101688eb57d3f7154fc9f2a9a1e2e2985d7059e847dfce3e222e0a280f0a49ec594763b265148719886dd6d505410cf3a6838ce41e1e6705c0d8825c0659a7a4b816f99d8a92b3b83417fcd9e31dc23cc", &(0x7f0000000240)="b316bf46d09a3cf4e11e5e26c6e5031be0e11759e3b957a1fb28e5c55824844825ed72608213b425318ff0671a4c789083eddc168e22e5a903e4b0d433a29e6eada3b012cd692c06da24529894f44d573e6bfe2f0caf34a031d45995353250ca2c4f29eda1d306d90671913b67a597b66b71411655759053c621f55b8f61f3a6049500950a9bb9861e35ffeaa9b64b2799acf209baab7c9919286c52c74fa9f176e62fa27e3384ab6ebfc6050218c4d5ff394e61c64a91e3edbe2249e78e6980ce5b", 0x7, 0x0, 0x9}, 0x50) (async) setsockopt(r0, 0x84, 0x7c, &(0x7f0000000040)="badd8e37a0feecff", 0x8) 2.024075498s ago: executing program 6 (id=5874): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x7, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x401, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x0, 0x0, 0xfffffffffffffce5, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000180)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000080)={'bridge0\x00', 0x2000}) 1.836516238s ago: executing program 7 (id=5876): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="0000001700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES32=r0]) socket$netlink(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x50040, &(0x7f00000001c0)={0x11, 0x3, r5, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000001a000100000000000000000080"], 0x1c}}, 0x0) getsockopt$bt_hci(r7, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 1.704596243s ago: executing program 5 (id=5877): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x2, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) socketpair(0x27, 0x800, 0xffff8990, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x2}}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @func={0x6}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x50}, 0x28) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1c8, r3, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x15c, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa4d3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x58b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ca9aa06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x514c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeccd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe7a2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a16}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x553831c4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xadad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x15ae}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1bde}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2fa3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x870a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe2a3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d604e68}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42dfec60}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x650b09da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x558f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45619e1a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5ad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x35a1}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d29}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x548bd557}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46f16001}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ac3f98f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x93da}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8dd7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1437d396}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e63}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcf6c}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6f94}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaac3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7aaa8b9f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x588e7c5c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x751a9d5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79fbb914}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x107016b1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x19f3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd9db}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x58, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ca47d06}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1eb3cf9b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x626ec9f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60c7eae3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa73832}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd59d333}]}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x80}, 0x8) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getsa={0x28, 0x12, 0x20, 0x70bd2c, 0x25dfdbff, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0x2, 0x6c}}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x20000880) 1.656157336s ago: executing program 6 (id=5878): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x6, 0x1, 0x9, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003"], 0x44}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_coalesce={0xe, 0x0, 0x80000000, 0x1, 0x2, 0xabc, 0x3ff, 0x3, 0x1, 0x1, 0x1, 0x0, 0xfffffff9, 0x80000001, 0x8, 0x56, 0xa9, 0x6, 0x1, 0x3, 0x6, 0x5, 0x800}}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) syz_80211_inject_frame(&(0x7f0000001b80), &(0x7f0000001bc0)=@data_frame={@msdu=@type01={{0x0, 0x2, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_a, @random="3e2aad8c7835", @device_b, {0x7, 0x1}}, @a_msdu=[{@device_b, @device_b}, {@broadcast}, {@device_a, @device_b, 0xbf, "83a8fa208e8650f03ea433517624e0a6ecde5b089eae328c94b8a2e7c3880c7400dfc52035b2c32a68b29dfbc7f9549f6e8ddf56e49230b5dd1467e2f94eb8c5d85cfe528f00612fc0a424105c7a524f39436c4317d21af991359e3c8acf5091928ab60ad9831a2b207c9b2a4cac079577d61abb843525c665f1f6be840d30eb81472100b2abf12f929daf28fe10defbbed857fabce58328a0d9c507979ed863ecc9503cbe2bfebf61d85e3b07d467dc707b72826e772fc9306fc7c4c73f0b"}, {@broadcast, @broadcast, 0x5e, "3625438e656fe905aeb991751ec425fa13a31a7003404696078e183a1f63116ff94984170d6f099478092bc6dbe2a47662a2014a95ef6611f1a699988f1a3ade4751ad96a14f8e0e4a56d93b39e33115495ae3f6d29b11b3644cc3d42220"}]}, 0x174) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x141841, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, 0x0) write$cgroup_pid(r5, &(0x7f0000000380), 0x12) write$cgroup_pid(r5, &(0x7f0000000200), 0x12) r7 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x0, 0x56, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x16}, {0x0, 0x0, 0x0, 0x100000002, 0xfffffffffffffff6, 0x2000000, 0x1, 0x8}, {0x7, 0x0, 0x2}, 0x932, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x6c}, 0xa, @in=@empty, 0x2, 0x4, 0x0, 0x0, 0xfffffffc, 0x8, 0x4}}, 0xe8) syz_emit_ethernet(0xf87, &(0x7f0000000fc0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd606410a60f510000fc020000000000000000000000000000ff02000000000000000000000000000184"], 0x0) r8 = socket(0x25, 0x1, 0xffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) 1.550608512s ago: executing program 5 (id=5879): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x40}, 0x1, 0x7}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x64, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x4}]}}}]}, 0x64}}, 0x0) 1.429807783s ago: executing program 7 (id=5880): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400000018000100000000001c0000000a0000000000000000000000080012"], 0x24}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) (async) bind$xdp(r2, &(0x7f0000000380)={0x2c, 0x4, 0x0, 0x800000}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'veth0_vlan\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4c, 0x2, 0x6, 0x80, 0x5, 0xe5, 0xf7, 0x78, 0xac, 0x6, [0x90, 0xa, 0x5, 0xff, 0x2, 0x88b1, 0x6, 0x8]}}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x8, 0xca, 0x0, 0x1000, {[@generic={0x13, 0x5, "2007a9"}, @mptcp=@syn={0x1e, 0xc, 0x3, 0x1, 0x6, 0x6, 0x1}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r6, &(0x7f0000000680)="4ede", 0x2) (async) splice(r6, &(0x7f0000000040), r5, 0x0, 0x800000000ff, 0x0) (async) bind$802154_dgram(r6, &(0x7f0000000000), 0x14) 1.155065657s ago: executing program 5 (id=5881): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8013000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x0, @null, @bpq0, 0x7, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) 968.265942ms ago: executing program 5 (id=5882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x7fff, @loopback, 0x9}, @in6={0xa, 0x4e22, 0x7ff, @empty, 0x7}], 0x38) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='cdg', 0x3) sendmmsg$inet6(r3, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000580)="7b6c60cacdaad6c996017e8241c92c576fbbacf35f1bf8d8db1e0566c263fe38e7922db31fe55c6150dffd821bc82de07f08a3af656ed4beabd7066a", 0x3c}, {&(0x7f00000005c0)="4bfc6af9354142e4e6ab1ca7e3753a9f3f0b2e242a3e9ce83302ed487413c024dae519d5d31600d0383d428cb26d5760a444b132d2c38433fa35e9cd62c10755e8a6157fac49523d5d6467df5130597906e41bdb5dd686ec3b2bd920996a445944579043a273caebb1648ecba3caab10cf6bceb9607f607c53243c76f1", 0x7d}, {&(0x7f0000000640)="9237555bcec1e409d9c1df5358ba56906163e07981862ef92e1d17892a44bb167499efafba8046565cace6db363bb1757c217f9bed7c7038", 0x38}, {&(0x7f0000002000)="ea3671da4c16a47848799b4779970c25ca1a361937a248644e6f574392a8df1b8ce64d5c79669b42700a61123177fdf95d2b49ca5e12e377c3a1f64952f817fe915bfe5150d11a1c358c47ca707e0c45864b56060c2abd07c4f9666771f93c771d4a636810d3388d79f5eceed800eba624a29701b3f7134a860a2052ac1bc3b3660f7ae2306a687f85240aff9a16bbffde830865f7380af36f615d6ee82385366e346960cd0806ebe9611559a71e3bd915810f5c22e3cc0b034da15c5b3d2724538d1da2c35d00f9284f41cbef6e0669fc2970591a323fe763deb7cdc5e4e09a8f747f6703aa1653894c7d6b58c6150a78793122b6067d5c55cd7946e97762dd7d9c1a9dfaf73a2c052a288a29f8c2fb0c0512cfb0d302e0a3229a35b2bdf0507c5b5dd98c028dfac9dc3bfb0e3db8af865a9faedcdae3ef66ac8052c38aaf8f31b287188c421cbd38a3f44e04a889786172d480d77fcb48394d15710e2b9580df76fa1186538019b4aad59ca3226fb8989ce651e4810b22155c1525f4343b052712960b77e85b6cdb8702e1e81ca2a5714486623e2a354c14c321c32a9fe14f9ac1d19fe2eae84c7c6176f5e809438187ce9c7a34812fb7f52146e048b0d423c00e93cc28427f192cbfba40b3aed96af45ff4f009c560e33afa92e8cc42592a566a47cc45073cdee2d38ef2c0ce9ef51e94e0378ff1115ca0b5131c9e8e2c31ab00dd6918bb9e646123fea6f0c2ce8501e91e36b90d746dc5eda45df153e8bd473ce0a8266434f350fdd4bef072674bf91048071ea74d98eb82c7aab0747180aed64d21f73dfac79a4ad3f05fb861362b23632d155ae3de06719c9497f9d073aed34c21967cf713c2d4958e081a50609b168f32b4cfb7ce890bee6745823dfb9fe5f960b880c47b2d776e469df12e993171ddf41e5a5f1e0dd2d155daff1b34017095d73458476bd85b8d924136e5679af0c7ddc99ff2ad46e2c8e8ef258160cceb37ad4e6d0ea9ace2101ee13356f9c5570f47c33b8d05244c11675b77623f7a6e42255a7145e60745f92dfe884237ae5ecf3e054ffaac403f41771646050d2a87f5ad4096ddfbbeb50ebb3ada6741b2ba5dff4de5c6a2b2028059e318e722121e8ce294ba069cbc07b894cbf8bce5e6b896fbdb664c97d107cb9aa3d10df7c078784bb234fbd6e468ee2071c67feafae0f90327749a50951490bd68c296ded245c15e255087e9092ffcc68c5af4dd78c1a2fdf4995d9b365d0a474cf96acdbbf9ef1c3442ca80abc406fda5fd32c4563f93d53a9c6f2a28adca32d14d815f4bb9896a373a1898c10220d5fd63777ca6d6f06d56ffa180b8eecc9cbed7b7c5de95024e304ab8a6581b7f6b0a5ede19fdb33c1b2f5a902405c10804531c397e0c5c6387301fa7688d272ef984fe1dd48301d1804f8fbd59a9290924cde0d7dcf87ffdb229ed9c760db7352a8059c88ddbc7022a2f6f4dd31d0495566b0ffe284f46868642ccfef3616d433408bc82dc82060e95a7f59d41964fef84d62522134f2e85db0217452e6b5ffa8b6942c72b8ba0b0073dc4919b8bf8848dae9df72aebd74a11bec6d9fb7393ba8180364797c8f07c7b6b99bd4dd6ae8ced1a75173c195969c962298dad980a1bfbbab34564de04000ec382dab503726eb771177ee09ba3608b", 0x4a4}], 0x4}}, {{&(0x7f0000001b80)={0xa, 0x4e24, 0x9, @empty, 0x3}, 0x1c, &(0x7f0000001c40)=[{&(0x7f0000001bc0)="137d72", 0x3}], 0x1, &(0x7f0000001c80)=[@flowinfo={{0x14, 0x29, 0xb, 0x48000}}, @rthdr={{0x18, 0x29, 0x39, {0x2, 0x0, 0x2, 0x5}}}], 0x30}}], 0x2, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1401000026000100000000001a000000030100800c"], 0x114}], 0x1}, 0x4000040) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 589.02046ms ago: executing program 5 (id=5883): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf, 0x8, 0x2, 0x80000000, 0x6, 0xc, 0x33c, 0x6c7, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xb}, {0x9, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0xf8, r6}, 0x14) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x12, 0x1, 0xf2, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0}, 0x40) pipe(&(0x7f0000000440)={0xffffffffffffffff}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000500)={0xbc31, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@map=r9, r7, 0x22, 0x20, 0x0, @void, @void, @void, @value=r10, r8}, 0x20) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@ipv6_getnexthop={0x18, 0x6a, 0x1}, 0x18}}, 0x0) 536.968492ms ago: executing program 3 (id=5811): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_EMATCHES={0x54, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x67e4}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x24}, {0x7d, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x4, 0x3, 0x8}, {0x8000, 0x7fffffff, 0x3, 0x1}}}]}]}]}}]}, 0x88}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00118008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_xfrm(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000080)=ANY=[@ANYBLOB="c40000001900f3fe0000000000000000fe8000000000000000000000000000bbac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000b86b6e0000000000000000000c0008"], 0xc4}}, 0x0) 460.504478ms ago: executing program 6 (id=5884): ioctl$OCFS2_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x2, 0x0, 0x1ef, 0xfffffffffffffffa, 0x1, 0x3}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0xbb, "d617888a79460adea60131eb2775f58e118de549da28b5c8cee726a8640aa2f498141a8cb0575c5c697057f8cb055282244d446a1f8ad8b5ec965288a062ba7298b8d87e1fff7c87acc6af8dd515bda9dab85a4ae43bfd8cbf42b0f11c809e915740d99dd580e1a206389a2dec1f6e3ca8bbee1e026a4a04f5f8e342504f0e9666c702d5088c5fc01c597bf270da20222f09e4a202404a3770ac8a4906d8f37272ac6efaff9e50f275753cf8fa4e22dbe849d6ff490fb8830d89fa"}, &(0x7f0000000140)=0xc3) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={r0, 0xe5f}, 0x8) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000001c0)=0x5, 0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000200), 0x4) r2 = socket$netlink(0x10, 0x3, 0x9) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f0000000240)={0x6564cbb4, 0x19, 0x55b, @empty, 'sit0\x00'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000340)={0x338, r6, 0x200, 0x8, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2e4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x400}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'$\xbe\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_BITS={0x140, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'\xf7\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ']**}!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':..\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xce58}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!{-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vcan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7859c0dc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000000}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '$m+/=\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '+-{+}]:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vcan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$*/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x143f}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xe5, 0x4, "8f72f7b9d3c76b5c535257f31a794b9d26bf9c30913c9fd0504165019544d2e7e0cf2d590f26193cc5bd3214c8078529960d152c322d55ede266bce235b89094a6547bbc1f740afe2cb602959b2c537e7c3a2c2c0662e6cc811e7d95bf11d843c693305255ee3d30132c04de06f144ab267e1a6cd8c1af93ea03bbcc8827e7cc3f0272ceb3a0a128350d2d6f6c379f9cffacc053f93faecbc64f56a94f4fdca64ac7fb10e08e7c67a08d93414283abf746277ad9acf06c283fb59c180b2437552901bbd075819db5de26d05ba39a5a3ffbeb055409b4308a22e2eb7772546d664d"}, @ETHTOOL_A_BITSET_VALUE={0x7f, 0x4, "5146a392872e5580fed49e70c3cdb763c4d1363234be375268002d23fb936cc8719b6e7380337bee267c19ea9e66f07fbb385e96a04e4827b9f7f2ce65d220a1c73cbe038713ce8bb2281c96e4c393779adb5a5e023dcc97587444f6215bde22d7ac68d85e0d1bc8aabee54842e97387d8ac1ea95e2c236980a9cf"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x4800}, 0x20000880) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000700)=0x1, &(0x7f0000000740)=0x2) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000780), 0x992459028a9d9688, 0x0) write$rfkill(r7, &(0x7f00000007c0)={0x0, 0x5, 0x2}, 0x8) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), r2) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x98, r8, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}]}, 0x98}}, 0x40) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r2, 0xc0805841, &(0x7f00000009c0)={0x6, 0x1, 0x0, 0x7, 0xfffffffb}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000b40)={r7, &(0x7f0000000a40)='&%\x00', 0x400, &(0x7f0000000a80)={@_ha_fsid={[0x6, 0x1]}, {0xcd4c, 0x6, 0x2, 0x486}}, 0x7, &(0x7f0000000ac0)={@_ha_fsid}, &(0x7f0000000b00)=0xd3}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000b80)=0x3ff, 0x4) sendmsg$can_j1939(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x1d, r5, 0x0, {0x2, 0xf0, 0xf}, 0xff}, 0x18, &(0x7f0000000c40)={&(0x7f0000000c00)="849eb4f758c45edd72935e355072dae7f1ddbafa", 0x14}, 0x1, 0x0, 0x0, 0x4c045}, 0x20004040) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_GET_PARAMS(r10, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '#'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) clock_gettime(0x0, &(0x7f0000000e00)={0x0, 0x0}) sendmsg$can_bcm(r9, &(0x7f0000000f00)={&(0x7f0000000dc0), 0x10, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x5, 0x121, 0x7, {0x77359400}, {r11, r12/1000+60000}, {0x3}, 0x1, @can={{0x2, 0x0, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "a8929e87d3773850"}}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000800) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000f40)=0x2, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000001000)={'syztnl2\x00', &(0x7f0000000fc0)={'tunl0\x00', r5, 0x0, 0x8000, 0x3, 0x6, {{0x8, 0x4, 0x0, 0x3b, 0x20, 0x66, 0x0, 0x1, 0x2f, 0x0, @broadcast, @empty, {[@generic={0x94, 0x9, "5563b822c0ba2a"}]}}}}}) getsockname$packet(r3, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001080)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001340)={&(0x7f0000001140)={0x1d4, r6, 0x1, 0x1, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x40}, 0x4800) 361.049794ms ago: executing program 1 (id=5885): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 64) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200)=0xffffffffffffffff, 0x12) sendfile(r1, r0, 0x0, 0xbdc4) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/244, 0xf4, 0x0) 271.000554ms ago: executing program 3 (id=5886): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="a5a9496e9ba7cd86884ff493ee00000000000000", @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="10005a800c000180050009"], 0x2c}}, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r13 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r14) ioctl$IOCTL_GET_NCIDEV_IDX(r13, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r15, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r16], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESDEC=r13, @ANYBLOB="08002cbd7000fedbdf250200000008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="52fe0100", @ANYRES8=r8, @ANYBLOB="08000140", @ANYRES32=r16, @ANYBLOB, @ANYRESOCT=r12], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4010) r17 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r17, &(0x7f0000000040)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) r18 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r18, &(0x7f0000000680)={0x18, 0x2, {0x0, @empty}}, 0x1e) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'bond_slave_0\x00', &(0x7f0000000280)=@ethtool_gstrings}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000004000070127bd060000000000080000000400c2800c000080080010808b26ee52040008007a4a90906202b9a8ff5f42692a1f8eb647d267087875a996ee16dd6212ba273311fd8524022a2eeab13cec219e7af7b3c59cfee8fb9b26bafd29dcf854914994f43d07ba54ebfd3f1a225334ceb4b6a751c4a1df4a37d63505e011449db9dfee8d655fa8738145f259684702714b4f0a1b8cc2bcada7a6cfca6771ae61e77636c20e0fdfe2958ec6de4f154dab2ca892c1c4498f31c23e57691a45e7ec87ef6e944843501fc3d18806921d55ed46f96e52bd57136351982cdebca19bd9796cb03c53c79dcb56f238f62665e350a126a007f69bb4a8f99e93bfe58feb41f51d1f937c34402f71be717e4d29322707d9b7d1b4b3bfffdafec092bc3f929e53280c8008217e8b4f0b632c1bee733c"], 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 227.427606ms ago: executing program 6 (id=5887): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newsa={0xf8, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@dev, 0x0, 0x3c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.101135ms ago: executing program 6 (id=5888): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x156}, {&(0x7f0000000bc0)="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", 0x1cb}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d8590070", 0x22}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464048cf573c21df5435e3b81aaba048fa4264d4c15513c91e9230a8e4b7635b58dc631604c311225f2", 0xd9}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) 16.227187ms ago: executing program 1 (id=5889): socket$nl_audit(0x10, 0x3, 0x9) (async) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="911007000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="911007000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c00028008000100", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, r5, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34010000", @ANYRES16=r6, @ANYBLOB="0100000000003fc14d7a0100000004000480080002000100000008000100000000000400088008010c8054000b800800090000000000080009000000000008000a0000000000080009000000000008000a00000000000800090000000009"], 0x134}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x48, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x48, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001", @ANYRESHEX=r7], 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x34}}, 0x0) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x10, 0x453, 0x0, 0x70bd27, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x3dfa708e056562c6}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x3dfa708e056562c6}, 0x48) r13 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r13, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @bcast, @bpq0, 0x21, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) ioctl$sock_rose_SIOCDELRT(r13, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xff, @null, @bpq0, 0x3, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="90000000", @ANYRES16=r11, @ANYBLOB="000225bd7000fcdbdf250700000008000300", @ANYRES32=r12, @ANYBLOB="0c009900090000002a0000000aec1700030303030303000000000000050053000000000005005300010000000a001800030303030303000008000500080000000a0018000303030303030000140004006d6163736563300000000000000000000400cc00"/116], 0x90}, 0x1, 0x0, 0x0, 0x4040080}, 0x40408c5) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="90000000", @ANYRES16=r11, @ANYBLOB="000225bd7000fcdbdf250700000008000300", @ANYRES32=r12, @ANYBLOB="0c009900090000002a0000000aec1700030303030303000000000000050053000000000005005300010000000a001800030303030303000008000500080000000a0018000303030303030000140004006d6163736563300000000000000000000400cc00"/116], 0x90}, 0x1, 0x0, 0x0, 0x4040080}, 0x40408c5) 0s ago: executing program 5 (id=5890): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2f00020b, 0x809, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x4) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendto$packet(r8, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x8100, r9}, 0x14) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) r13 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r13, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x19, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r12, 0x2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0x4, 0x2, 0x1}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x58}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000002180006801400040020010000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x378b5ec3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4}}}]}]}], {0x14}}, 0xc8}}, 0x0) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) r18 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r18, 0x1, 0x5, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="540100001800010012000000000000001d30534c657d2167cb131d0100001500030000000000000000008ca5be073cff296e020000001e01060001", @ANYRESDEC=r14], 0x154}}, 0x0) kernel console output (not intermixed with test programs): n new flow. [ 512.634958][T22593] syzkaller0: entered promiscuous mode [ 512.641899][T22593] syzkaller0: entered allmulticast mode [ 512.669652][T22607] netlink: 'syz.1.4487': attribute type 1 has an invalid length. [ 512.863042][T22620] netlink: 'syz.5.4489': attribute type 1 has an invalid length. [ 512.873396][T22607] 8021q: adding VLAN 0 to HW filter on device bond9 [ 512.932406][T22618] __nla_validate_parse: 6 callbacks suppressed [ 512.932430][T22618] netlink: 512 bytes leftover after parsing attributes in process `syz.3.4490'. [ 513.018577][T22613] bond9: (slave veth9): Enslaving as an active interface with a down link [ 513.227573][T22630] netlink: 'syz.0.4492': attribute type 8 has an invalid length. [ 513.229127][T22631] netlink: 'syz.0.4492': attribute type 8 has an invalid length. [ 513.235930][T22630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4492'. [ 513.270693][T22631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4492'. [ 513.324683][T22616] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 513.333481][T22616] bond9: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 513.408429][T22620] 8021q: adding VLAN 0 to HW filter on device bond4 [ 513.443198][T22622] bond4: (slave veth3): Enslaving as an active interface with a down link [ 513.466478][T22625] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 513.545656][T22627] bond4: (slave veth5): Enslaving as an active interface with a down link [ 513.555239][T22627] netlink: 'syz.5.4489': attribute type 1 has an invalid length. [ 513.563341][T22627] netlink: 'syz.5.4489': attribute type 2 has an invalid length. [ 513.563741][T22630] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.578766][T22630] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.839594][T22654] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4495'. [ 513.858886][T22649] veth5: entered allmulticast mode [ 513.985838][T22657] netlink: 'syz.1.4498': attribute type 58 has an invalid length. [ 514.000611][T22657] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4498'. [ 514.044329][T22660] netlink: 408 bytes leftover after parsing attributes in process `syz.3.4499'. [ 514.189713][T22665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4501'. [ 514.200438][T22665] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4501'. [ 514.821201][T22693] netlink: 'syz.0.4510': attribute type 1 has an invalid length. [ 514.826323][T22669] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4503'. [ 514.849631][T22693] netlink: 'syz.0.4510': attribute type 1 has an invalid length. [ 514.932426][T22704] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4509'. [ 515.020168][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 515.028285][ C0] lec:lec_tx_timeout: lec0 [ 515.033051][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 515.273514][T22709] tipc: Started in network mode [ 515.285695][T22709] tipc: Node identity fe948d492923, cluster identity 4711 [ 515.321102][T22709] tipc: Enabled bearer , priority 0 [ 515.451349][T22713] netlink: 'syz.2.4513': attribute type 1 has an invalid length. [ 515.596939][T16888] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 515.608097][T16888] CPU: 1 UID: 0 PID: 16888 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 515.608126][T16888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 515.608148][T16888] Call Trace: [ 515.608157][T16888] [ 515.608165][T16888] dump_stack_lvl+0xe8/0x150 [ 515.608200][T16888] dump_header+0xd3/0x4c0 [ 515.608227][T16888] oom_kill_process+0x3ab/0x970 [ 515.608256][T16888] out_of_memory+0x106c/0x1410 [ 515.608278][T16888] ? percpu_ref_put+0x19/0x180 [ 515.608306][T16888] ? __pfx___mutex_lock+0x10/0x10 [ 515.608344][T16888] ? __pfx_out_of_memory+0x10/0x10 [ 515.608363][T16888] ? do_raw_spin_unlock+0xf5/0x210 [ 515.608397][T16888] try_charge_memcg+0xc53/0x1560 [ 515.608443][T16888] ? __pfx_try_charge_memcg+0x10/0x10 [ 515.608481][T16888] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 515.608512][T16888] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 515.608541][T16888] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 515.608568][T16888] __swap_cache_prepare_and_add+0xe8/0x760 [ 515.608607][T16888] ? page_rmappable_folio+0x9a/0x170 [ 515.608643][T16888] swap_cache_alloc_folio+0xf1/0x240 [ 515.608679][T16888] swap_cluster_readahead+0x369/0x690 [ 515.608707][T16888] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 515.608744][T16888] ? get_vma_policy+0x27b/0x3c0 [ 515.608774][T16888] swapin_readahead+0x196/0xc50 [ 515.608810][T16888] ? __pfx_swapin_readahead+0x10/0x10 [ 515.608832][T16888] ? swap_table_get+0x1e/0x260 [ 515.608860][T16888] ? swap_table_get+0x1e/0x260 [ 515.608885][T16888] ? swap_table_get+0x1e/0x260 [ 515.608914][T16888] ? swap_table_get+0x216/0x260 [ 515.608945][T16888] ? swap_cache_get_folio+0x513/0x520 [ 515.608981][T16888] do_swap_page+0x56f/0x5a20 [ 515.609036][T16888] ? do_swap_page+0x127/0x5a20 [ 515.609064][T16888] ? __pfx_do_swap_page+0x10/0x10 [ 515.609090][T16888] ? __pte_offset_map+0x1ae/0x240 [ 515.609115][T16888] ? pte_offset_map_rw_nolock+0xea/0x160 [ 515.609145][T16888] handle_mm_fault+0x12d2/0x3310 [ 515.609193][T16888] ? handle_mm_fault+0xee/0x3310 [ 515.609233][T16888] ? __pfx_handle_mm_fault+0x10/0x10 [ 515.609262][T16888] ? lock_vma_under_rcu+0x45a/0x500 [ 515.609316][T16888] do_user_addr_fault+0xa73/0x1340 [ 515.609352][T16888] ? rcu_is_watching+0x15/0xb0 [ 515.609382][T16888] ? trace_page_fault_user+0x84/0x210 [ 515.609412][T16888] exc_page_fault+0x6a/0xc0 [ 515.609442][T16888] asm_exc_page_fault+0x26/0x30 [ 515.609462][T16888] RIP: 0033:0x7fc97e75d04e [ 515.609482][T16888] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 515.609499][T16888] RSP: 002b:00007ffc990f90d8 EFLAGS: 00010246 [ 515.609519][T16888] RAX: 0000000000000000 RBX: 0000555590034500 RCX: 00007fc97e75d04e [ 515.609534][T16888] RDX: 00007ffc990f9130 RSI: 0000000000000000 RDI: 0000000000000000 [ 515.609547][T16888] RBP: 00007ffc990f919c R08: 0000000000000000 R09: 0000000000000000 [ 515.609559][T16888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 515.609572][T16888] R13: 00000000000927c0 R14: 000000000007db85 R15: 00007ffc990f91f0 [ 515.609607][T16888] [ 515.609616][T16888] memory: usage 307200kB, limit 307200kB, failcnt 142 [ 515.843764][T22713] 8021q: adding VLAN 0 to HW filter on device bond2 [ 515.847411][T16888] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 515.953071][T16888] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 515.953268][T22718] bond2: entered allmulticast mode [ 515.961170][T16888] Memory cgroup stats for /syz5: [ 515.965942][T16888] cache 0 [ 515.974569][T16888] rss 0 [ 515.977371][T16888] rss_huge 0 [ 515.981049][T16888] shmem 0 [ 515.984007][T16888] mapped_file 0 [ 515.987484][T16888] dirty 0 [ 515.991403][T16888] writeback 0 [ 515.994726][T16888] workingset_refault_anon 7 [ 515.999256][T16888] workingset_refault_file 0 [ 516.003994][T16888] swap 212992 [ 516.007315][T16888] swapcached 253952 [ 516.011325][T16888] pgpgin 27211 [ 516.014724][T16888] pgpgout 27208 [ 516.018287][T16888] pgfault 50885 [ 516.022348][T16888] pgmajfault 4 [ 516.025831][T16888] inactive_anon 8192 [ 516.029753][T16888] active_anon 4096 [ 516.033711][T16888] inactive_file 0 [ 516.037370][T16888] active_file 0 [ 516.040979][T16888] unevictable 0 [ 516.044464][T16888] hierarchical_memory_limit 314572800 [ 516.050804][T16888] hierarchical_memsw_limit 9223372036854771712 [ 516.056999][T16888] total_cache 0 [ 516.060868][T16888] total_rss 0 [ 516.064192][T16888] total_rss_huge 0 [ 516.067937][T16888] total_shmem 0 [ 516.071587][T16888] total_mapped_file 0 [ 516.075594][T16888] total_dirty 0 [ 516.079169][T16888] total_writeback 0 [ 516.083601][T16888] total_workingset_refault_anon 7 [ 516.088653][T16888] total_workingset_refault_file 0 [ 516.093863][T16888] total_swap 212992 [ 516.097697][T16888] total_swapcached 253952 [ 516.102153][T16888] total_pgpgin 27211 [ 516.106064][T16888] total_pgpgout 27208 [ 516.110694][T16888] total_pgfault 50885 [ 516.114795][T16888] total_pgmajfault 4 [ 516.118806][T16888] total_inactive_anon 8192 [ 516.123735][T16888] total_active_anon 4096 [ 516.128075][T16888] total_inactive_file 0 [ 516.132643][T16888] total_active_file 0 [ 516.137211][T16888] total_unevictable 0 [ 516.142717][T16888] anon_cost 0 [ 516.146210][T16888] file_cost 0 [ 516.149750][T16888] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4509,pid=22688,uid=0 [ 516.171968][T16888] Memory cgroup out of memory: Killed process 22688 (syz.5.4509) total-vm:167956kB, anon-rss:1240kB, file-rss:23072kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 516.175285][T22709] syzkaller0: entered promiscuous mode [ 516.220811][T22709] syzkaller0: entered allmulticast mode [ 516.227447][T22709] tipc: Resetting bearer [ 516.311920][T22727] gretap0: entered promiscuous mode [ 516.318226][T22727] debugfs: 'hsr1' already exists in 'hsr' [ 516.381408][T22727] Cannot create hsr debugfs directory [ 516.387025][T22727] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 516.520429][T22708] tipc: Resetting bearer [ 519.081650][T22708] tipc: Disabling bearer [ 519.090618][ T7094] tipc: Node number set to 3619130697 [ 519.300772][T22759] validate_nla: 3 callbacks suppressed [ 519.300794][T22759] netlink: 'syz.1.4523': attribute type 1 has an invalid length. [ 519.427045][T22772] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 519.531094][T22771] bond10: entered promiscuous mode [ 519.536297][T22771] bond10: entered allmulticast mode [ 519.576776][T22771] 8021q: adding VLAN 0 to HW filter on device bond10 [ 519.688457][T22779] bridge6: entered promiscuous mode [ 519.697005][T22779] bridge6: entered allmulticast mode [ 519.704115][T22779] bond10: (slave bridge6): Enslaving as a backup interface with an up link [ 519.771414][ T49] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 519.825948][T22790] tipc: Enabling of bearer rejected, failed to enable media [ 519.921384][ T77] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 520.040025][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 520.048121][ C0] lec:lec_tx_timeout: lec0 [ 520.053409][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 520.147237][T22809] __nla_validate_parse: 4 callbacks suppressed [ 520.147260][T22809] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4535'. [ 520.203394][T22816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4538'. [ 520.361366][T22826] netlink: 'syz.0.4539': attribute type 4 has an invalid length. [ 520.369166][T22826] netlink: 'syz.0.4539': attribute type 1 has an invalid length. [ 520.409163][T22826] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4539'. [ 521.395421][T22793] lo speed is unknown, defaulting to 1000 [ 521.531356][T22870] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 521.559644][T22870] bond3: (slave lo): Enslaving as an active interface with an up link [ 521.572246][T22870] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 521.741485][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.750471][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.759058][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.767558][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.776034][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.784597][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.873077][T22885] netlink: 'syz.3.4554': attribute type 9 has an invalid length. [ 522.083138][T22894] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20001 [ 522.119161][T22895] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20001 [ 522.245251][T22903] netlink: 'syz.0.4556': attribute type 2 has an invalid length. [ 522.282788][T22903] netlink: 'syz.0.4556': attribute type 1 has an invalid length. [ 522.321195][T22903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4556'. [ 522.334654][T22905] netlink: 'syz.1.4558': attribute type 39 has an invalid length. [ 522.439305][T22903] batman_adv: batadv0: Adding interface: dummy0 [ 522.486525][T22903] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.514150][T22916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4561'. [ 522.528016][T22903] batman_adv: batadv0: Interface activated: dummy0 [ 522.566632][T22921] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 522.903048][T22942] netlink: 'syz.2.4567': attribute type 33 has an invalid length. [ 523.048037][T22942] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 523.078296][T22942] bond4 (unregistering): Released all slaves [ 523.226256][T22953] x_tables: duplicate underflow at hook 4 [ 523.390613][T22970] netlink: 'syz.1.4573': attribute type 15 has an invalid length. [ 523.403605][T22970] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4573'. [ 523.417484][T22970] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4573'. [ 523.437675][T22971] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4572'. [ 523.444511][T22970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4573'. [ 523.466401][T22970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4573'. [ 523.486428][T22974] syz.2.4574 (22974) used obsolete PPPIOCDETACH ioctl [ 523.974216][T23005] geneve2: entered promiscuous mode [ 523.981366][T23005] geneve2: entered allmulticast mode [ 524.043805][T23008] netlink: 'syz.0.4584': attribute type 3 has an invalid length. [ 524.065833][T23008] NCSI netlink: No device for ifindex 813332851 [ 524.447138][T23038] sctp: [Deprecated]: syz.5.4594 (pid 23038) Use of struct sctp_assoc_value in delayed_ack socket option. [ 524.447138][T23038] Use struct sctp_sack_info instead [ 524.503151][T23039] validate_nla: 1 callbacks suppressed [ 524.503173][T23039] netlink: 'syz.0.4593': attribute type 10 has an invalid length. [ 524.622896][T23039] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 524.908324][T23071] net_ratelimit: 26 callbacks suppressed [ 524.908346][T23071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.030174][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.038724][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.047243][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.055691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.063927][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.072511][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.081029][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.089495][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.097985][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.129266][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5070 ms [ 525.137355][ C0] lec:lec_tx_timeout: lec0 [ 525.144308][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 525.303510][T23077] IPVS: persistence engine module ip_vs_pe_ not found [ 525.315629][T23078] IPVS: ip_vs_edit_dest(): server weight less than zero [ 525.826202][T23111] netlink: 'syz.0.4615': attribute type 1 has an invalid length. [ 525.852647][T23111] __nla_validate_parse: 7 callbacks suppressed [ 525.852669][T23111] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4615'. [ 525.890708][T23116] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4617'. [ 525.926182][T23111] netlink: 'syz.0.4615': attribute type 8 has an invalid length. [ 525.954234][T23111] dvmrp0: entered allmulticast mode [ 525.996488][T23122] netlink: 'syz.5.4617': attribute type 15 has an invalid length. [ 526.019251][T23116] ipvlan2: entered allmulticast mode [ 526.042238][T23116] syz_tun: entered allmulticast mode [ 526.059776][T23127] sctp: [Deprecated]: syz.1.4616 (pid 23127) Use of int in max_burst socket option. [ 526.059776][T23127] Use struct sctp_assoc_value instead [ 526.186901][T23136] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4620'. [ 526.230560][T23131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4620'. [ 526.889655][T23159] netlink: 'syz.2.4626': attribute type 1 has an invalid length. [ 526.898026][T23161] sock: sock_timestamping_bind_phc: sock not bind to device [ 526.977856][T23159] 8021q: adding VLAN 0 to HW filter on device bond4 [ 526.991598][T23118] lo speed is unknown, defaulting to 1000 [ 527.200407][T23168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4629'. [ 527.209669][T23168] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4629'. [ 527.221334][T23168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4629'. [ 527.486587][T23166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4626'. [ 527.961975][T23188] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4635'. [ 527.998590][T23188] macsec1: entered promiscuous mode [ 528.016482][T23188] bridge0: entered promiscuous mode [ 528.033673][T23188] macsec1: entered allmulticast mode [ 528.039124][T23188] bridge0: entered allmulticast mode [ 528.061684][T23188] bridge0: port 3(macsec1) entered blocking state [ 528.068440][T23188] bridge0: port 3(macsec1) entered disabled state [ 528.136069][T23188] bridge0: left allmulticast mode [ 528.147213][T23188] bridge0: left promiscuous mode [ 528.647509][T23222] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4646'. [ 529.346517][T23270] siw: device registration error -23 [ 530.057423][T23306] syzkaller0: entered promiscuous mode [ 530.107274][T23306] syzkaller0: entered allmulticast mode [ 530.112048][T23310] netlink: 'syz.1.4676': attribute type 1 has an invalid length. [ 530.121845][T23311] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 530.170045][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 530.178109][ C0] lec:lec_tx_timeout: lec0 [ 530.183426][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 530.210823][ T30] audit: type=1800 audit(1775894381.997:11): pid=23310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4676" name="memory.events" dev="tmpfs" ino=1994 res=0 errno=0 [ 530.515346][T23329] netlink: 'syz.5.4682': attribute type 3 has an invalid length. [ 530.540122][T23329] netlink: 'syz.5.4682': attribute type 3 has an invalid length. [ 531.001401][T23354] bond11: entered promiscuous mode [ 531.043569][T23356] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 531.244605][T23375] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 531.563924][T23394] __nla_validate_parse: 4 callbacks suppressed [ 531.563946][T23394] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4699'. [ 531.659030][T23396] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4701'. [ 531.680985][T23396] block nbd0: Unsupported socket: should be TCP or UNIX. [ 531.694147][T23403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4703'. [ 531.704855][T23403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4703'. [ 531.740353][ C0] net_ratelimit: 180 callbacks suppressed [ 531.740374][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.754668][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.763112][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.771573][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.854805][ T7080] lo speed is unknown, defaulting to 1000 [ 531.860862][ T7080] syz0: Port: 1 Link ACTIVE [ 531.980257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.988764][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.997302][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.005793][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.014308][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.022890][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.043928][T23419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4708'. [ 532.604024][T23460] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 532.620696][T23460] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 532.733427][T23466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4721'. [ 532.749444][T23466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4721'. [ 532.752234][T23472] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4722'. [ 532.767188][T23466] netlink: 'syz.0.4721': attribute type 12 has an invalid length. [ 532.781638][T23471] xt_hashlimit: invalid interval [ 532.807604][T23476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4720'. [ 532.821225][T23476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4720'. [ 532.843653][T23466] netlink: 'syz.0.4721': attribute type 29 has an invalid length. [ 533.269055][T23496] bond8: entered promiscuous mode [ 533.845073][T23523] netlink: 'syz.1.4740': attribute type 2 has an invalid length. [ 534.239258][T23548] netlink: 'syz.1.4743': attribute type 39 has an invalid length. [ 534.359398][T23551] bond3: option mode: unable to set because the bond device has slaves [ 534.523585][T23561] netlink: 'syz.2.4750': attribute type 1 has an invalid length. [ 534.673260][T23569] netlink: 'syz.0.4752': attribute type 1 has an invalid length. [ 535.190010][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 535.198109][ C0] lec:lec_tx_timeout: lec0 [ 535.203113][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 535.283381][T23605] SET target dimension over the limit! [ 535.388501][T23616] vcan0: tx address claim with different name [ 535.543258][T23623] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 535.583931][T23623] mac80211_hwsim hwsim49 wlan0: entered promiscuous mode [ 536.118660][T23658] veth1_macvtap: left promiscuous mode [ 536.130306][T23658] macsec0: entered promiscuous mode [ 536.135569][T23658] macsec0: entered allmulticast mode [ 536.667717][T23694] __nla_validate_parse: 8 callbacks suppressed [ 536.667738][T23694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4795'. [ 536.687032][T23686] bond5 (unregistering): Released all slaves [ 536.687621][T23694] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4795'. [ 536.892376][T23705] netlink: 'syz.3.4800': attribute type 25 has an invalid length. [ 537.012350][T23712] netlink: 'syz.1.4802': attribute type 1 has an invalid length. [ 537.041475][T23712] netlink: 216 bytes leftover after parsing attributes in process `syz.1.4802'. [ 537.112174][T23717] bond0: (slave gre0): refused to change device type [ 537.336867][T23731] net_ratelimit: 14 callbacks suppressed [ 537.336891][T23731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.479884][T23742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.514836][T23738] syzkaller0: entered promiscuous mode [ 537.533937][T23746] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4815'. [ 537.547549][T23746] netlink: 'syz.3.4815': attribute type 1 has an invalid length. [ 537.809868][T23749] bond4: entered promiscuous mode [ 537.815530][T23749] bond4: entered allmulticast mode [ 537.822087][T23749] 8021q: adding VLAN 0 to HW filter on device bond4 [ 537.856224][T23750] bridge3: entered promiscuous mode [ 537.864302][T23750] bridge3: entered allmulticast mode [ 537.872091][T23750] bond4: (slave bridge3): Enslaving as a backup interface with an up link [ 537.903135][T23746] bridge4: entered promiscuous mode [ 537.912960][T23746] bridge4: entered allmulticast mode [ 537.922333][T23746] bond4: (slave bridge4): Enslaving as a backup interface with a down link [ 537.932522][T10580] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 538.050886][ T147] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 538.061911][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.070330][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.078686][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.087114][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.246706][T23770] Bluetooth: hci3: Opcode 0x0c20 failed: -4 [ 538.334334][T23758] netlink: 'syz.5.4817': attribute type 2 has an invalid length. [ 538.447721][T23778] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4824'. [ 538.531450][T23782] openvswitch: netlink: IPv4 tun info is not correct [ 538.657001][T23786] netlink: 'syz.1.4827': attribute type 3 has an invalid length. [ 538.776577][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.785999][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.887059][T23794] netlink: 'syz.5.4831': attribute type 4 has an invalid length. [ 538.920594][T23797] netlink: 332 bytes leftover after parsing attributes in process `syz.1.4832'. [ 538.969085][T23799] netlink: 'syz.5.4831': attribute type 4 has an invalid length. [ 539.218081][T23809] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4834'. [ 539.336125][T23809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4834'. [ 540.053416][ T49] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.104715][ T49] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.170698][T23823] netlink: 'syz.5.4836': attribute type 3 has an invalid length. [ 540.206651][T23823] netlink: 'syz.5.4836': attribute type 3 has an invalid length. [ 540.269507][ T49] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.305714][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 540.328424][ T49] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.364682][T23832] netlink: 87 bytes leftover after parsing attributes in process `syz.1.4840'. [ 540.592574][T23830] syzkaller0: entered promiscuous mode [ 540.623084][T23830] syzkaller0: entered allmulticast mode [ 541.267569][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6060 ms [ 541.275716][ C0] lec:lec_tx_timeout: lec0 [ 541.286140][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 542.340013][ C0] net_ratelimit: 25179 callbacks suppressed [ 542.340039][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.354325][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.362647][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.370982][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.379190][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.387473][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.395718][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.404102][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.412382][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.420723][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.083147][T23879] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4854'. [ 546.312597][T23884] Bluetooth: MGMT ver 1.23 [ 546.454795][T23884] sit2: entered promiscuous mode [ 546.487971][T23884] sit2: entered allmulticast mode [ 546.859577][T23803] lo speed is unknown, defaulting to 1000 [ 547.026092][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5730 ms [ 547.034198][ C0] lec:lec_tx_timeout: lec0 [ 547.048118][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 547.350053][ C0] net_ratelimit: 40076 callbacks suppressed [ 547.350075][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.364418][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.372684][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.380978][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.389180][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.397884][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.406232][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.415155][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.423473][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.431782][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.423297][ C0] sched: DL replenish lagged too much [ 548.615108][T23920] netlink: 'syz.1.4865': attribute type 8 has an invalid length. [ 548.679624][T23920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4865'. [ 548.855732][T23920] bond0: entered promiscuous mode [ 548.917588][T23920] bond_slave_0: entered promiscuous mode [ 548.953590][T23920] bond_slave_1: entered promiscuous mode [ 548.984553][T23920] bridge_slave_1: entered promiscuous mode [ 549.029537][T22864] Bluetooth: hci6: command 0x0405 tx timeout [ 549.096664][T23920] bond0: left promiscuous mode [ 549.110962][T23920] bond_slave_0: left promiscuous mode [ 549.133749][T23920] bond_slave_1: left promiscuous mode [ 549.146312][T23920] bridge_slave_1: left promiscuous mode [ 552.070021][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 552.078072][ C0] lec:lec_tx_timeout: lec0 [ 552.087918][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 552.360028][ C1] net_ratelimit: 51038 callbacks suppressed [ 552.360052][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.374446][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.382816][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.391141][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.399431][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.407806][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.416279][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.424612][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.432993][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.433727][T23936] netlink: 5088 bytes leftover after parsing attributes in process `syz.2.4868'. [ 552.441317][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.510232][T23936] ksmbd: Unknown IPC event: 16, ignore. [ 552.608681][T23936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4868'. [ 552.689564][T23943] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4870'. [ 552.807135][T23944] x9: left allmulticast mode [ 552.834376][T23944] x9: left promiscuous mode [ 552.844766][T23944] bridge0: port 1(1x9) entered disabled state [ 552.882473][T23944] bridge_slave_1: left allmulticast mode [ 552.891921][T23944] bridge_slave_1: left promiscuous mode [ 552.909873][T23944] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.976700][T23944] bond4: (slave veth0_to_bond): Releasing active interface [ 552.996465][T23944] : (slave bond_slave_0): Releasing backup interface [ 553.018915][T23944] : (slave bond_slave_1): Releasing backup interface [ 553.038351][T23944] team0: Port device team_slave_0 removed [ 553.068873][T23944] team0: Port device team_slave_1 removed [ 553.075931][T23944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.089101][T23944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.744569][T23970] nbd: illegal input index 2958377 [ 554.579879][T23986] netlink: 'syz.5.4881': attribute type 1 has an invalid length. [ 554.635935][T23986] netlink: 216 bytes leftover after parsing attributes in process `syz.5.4881'. [ 554.883586][T23997] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20002 [ 555.086178][T24004] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4885'. [ 555.163366][T24006] dvmrp0: entered allmulticast mode [ 555.296112][T24009] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.4886'. [ 556.015162][T24018] netlink: 816 bytes leftover after parsing attributes in process `syz.1.4889'. [ 556.483636][T24038] netlink: 'syz.2.4894': attribute type 13 has an invalid length. [ 556.574802][T24038] netlink: 'syz.2.4894': attribute type 58 has an invalid length. [ 556.614104][T24038] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4894'. [ 557.108150][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 557.116779][ C0] lec:lec_tx_timeout: lec0 [ 557.131404][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 557.169636][T24056] syzkaller0: entered promiscuous mode [ 557.183656][T24056] syzkaller0: entered allmulticast mode [ 557.370041][ C0] net_ratelimit: 32663 callbacks suppressed [ 557.370065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.384560][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.393085][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.401526][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.409827][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.418430][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.427479][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.435826][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.444160][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.452622][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.691569][T24069] bond12 (unregistering): Released all slaves [ 558.299871][T24089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4902'. [ 559.953476][T24093] netlink: 'syz.1.4905': attribute type 3 has an invalid length. [ 559.962040][T24093] netlink: 666 bytes leftover after parsing attributes in process `syz.1.4905'. [ 560.913626][T24136] netlink: 'syz.5.4916': attribute type 2 has an invalid length. [ 561.473349][T24164] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode [ 561.574669][T24164] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode [ 561.756398][T24170] bond0: Device is already in use. [ 561.948714][T24173] syzkaller1: entered promiscuous mode [ 561.977557][T24173] syzkaller1: entered allmulticast mode [ 562.033045][T24180] tipc: Enabling of bearer rejected, already enabled [ 562.078882][T24180] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4925'. [ 562.157766][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 562.165838][ C0] lec:lec_tx_timeout: lec0 [ 562.179356][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 562.278454][T24185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4927'. [ 562.408183][T24194] netlink: 'syz.2.4930': attribute type 3 has an invalid length. [ 562.477447][T24191] net_ratelimit: 33629 callbacks suppressed [ 562.477468][T24191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 562.759764][T24213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4935'. [ 562.849762][T24215] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 563.975242][T24241] netlink: 'syz.1.4944': attribute type 1 has an invalid length. [ 564.153249][T22864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 564.170708][T22864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 564.179343][T22864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 564.188457][T22864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 564.197995][T22864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 564.198583][T24246] netlink: 'syz.3.4946': attribute type 23 has an invalid length. [ 564.373803][T24255] openvswitch: netlink: Multiple metadata blocks provided [ 566.301721][T22864] Bluetooth: hci0: command tx timeout [ 566.525512][T24282] xt_ecn: cannot match TCP bits for non-tcp packets [ 566.699800][T24288] veth0: entered promiscuous mode [ 566.733740][T24242] lo speed is unknown, defaulting to 1000 [ 566.924213][T24287] veth0: left promiscuous mode [ 567.186940][T24242] chnl_net:caif_netlink_parms(): no params data found [ 567.199951][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 567.208152][ C0] lec:lec_tx_timeout: lec0 [ 567.213674][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 567.236606][T24318] netlink: 'syz.5.4964': attribute type 1 has an invalid length. [ 567.246509][T24318] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4964'. [ 567.265090][T24321] netlink: 'syz.2.4965': attribute type 1 has an invalid length. [ 567.397146][T24242] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.404539][T24242] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.412543][T24242] bridge_slave_0: entered allmulticast mode [ 567.421658][T24242] bridge_slave_0: entered promiscuous mode [ 567.431084][T24242] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.438505][T24242] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.446452][T24242] bridge_slave_1: entered allmulticast mode [ 567.455036][T24242] bridge_slave_1: entered promiscuous mode [ 567.518217][T24242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.538914][T24242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.596085][T24338] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 567.693802][T24342] bond5: Unable to set up delay as MII monitoring is disabled [ 567.793723][T24348] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4971'. [ 567.825104][T24342] bond5 (unregistering): Released all slaves [ 567.905087][T24242] team0: Port device team_slave_0 added [ 567.942830][T24242] team0: Port device team_slave_1 added [ 568.017573][T24242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.025076][T24242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.053211][T24242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.067036][T24242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.108449][T24242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.141789][T24242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.295599][T24242] hsr_slave_0: entered promiscuous mode [ 568.307044][T24242] hsr_slave_1: entered promiscuous mode [ 568.319297][T24366] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.4977'. [ 568.330947][T24366] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 568.353728][T24242] debugfs: 'hsr0' already exists in 'hsr' [ 568.359618][T24242] Cannot create hsr debugfs directory [ 568.380783][T22864] Bluetooth: hci0: command tx timeout [ 568.396161][T24369] netlink: 'syz.2.4978': attribute type 1 has an invalid length. [ 568.457012][T24369] 8021q: adding VLAN 0 to HW filter on device bond5 [ 568.535062][T24369] 8021q: adding VLAN 0 to HW filter on device bond5 [ 568.556327][T24369] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 568.568752][T24369] bond5: (slave vcan1): Error -95 calling set_mac_address [ 568.578643][T24381] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4982'. [ 568.604260][T24377] netlink: 'syz.3.4981': attribute type 33 has an invalid length. [ 568.655422][T24377] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 568.655842][T24379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4981'. [ 568.678777][T24377] bond5 (unregistering): Released all slaves [ 568.699305][T24381] tipc: Enabling of bearer rejected, failed to enable media [ 568.715937][T24385] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4982'. [ 568.926362][T24390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4984'. [ 569.069209][T24242] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 569.145704][T24242] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 569.162712][T24242] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 569.188451][T24242] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 569.204181][T24401] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4988'. [ 569.251803][T24405] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4988'. [ 569.254111][T24406] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4990'. [ 569.337570][T24242] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 569.354590][T24242] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 569.372248][T24242] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 569.418267][T24242] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 569.438404][T24414] netlink: 'syz.2.4989': attribute type 4 has an invalid length. [ 569.706550][T24242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.765802][T24242] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.788458][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.795723][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.876211][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.883494][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.965925][T24438] bond0 (unregistering): left promiscuous mode [ 569.991960][T24438] bond0 (unregistering): Released all slaves [ 569.999012][T24445] openvswitch: netlink: IP tunnel dst address not specified [ 570.121616][T24449] syzkaller0: entered promiscuous mode [ 570.127170][T24449] syzkaller0: entered allmulticast mode [ 570.168103][T24449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.460680][ T5841] Bluetooth: hci0: command tx timeout [ 570.525960][T24469] netlink: 'syz.1.5005': attribute type 1 has an invalid length. [ 570.588099][T24242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.253266][T24242] veth0_vlan: entered promiscuous mode [ 571.285108][T24242] veth1_vlan: entered promiscuous mode [ 571.402093][T24242] veth0_macvtap: entered promiscuous mode [ 571.427558][T24242] veth1_macvtap: entered promiscuous mode [ 571.494914][T24515] bond6: option mode: invalid value (133) [ 571.503982][T24515] bond6 (unregistering): Released all slaves [ 571.617269][T24242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.654114][T24242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.704715][T10577] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.722193][T10577] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.746286][T10577] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.771387][T10577] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.376942][T24540] netlink: 'syz.1.5023': attribute type 1 has an invalid length. [ 572.509063][T24550] Bluetooth: MGMT ver 1.23 [ 572.540449][ T5841] Bluetooth: hci0: command 0x0419 tx timeout [ 572.552648][T24554] __nla_validate_parse: 9 callbacks suppressed [ 572.552669][T24554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5024'. [ 573.259963][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6050 ms [ 573.268152][ C0] lec:lec_tx_timeout: lec0 [ 573.273509][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 574.359652][T24507] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 574.488024][T10579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.498038][T10579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.620903][T22864] Bluetooth: hci0: command 0x0419 tx timeout [ 574.703537][T24572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5032'. [ 574.705977][T24568] team0 (unregistering): Port device team_slave_1 removed [ 574.777867][T10577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.792376][T10577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.951545][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f9e1000: rx timeout, send abort [ 574.962635][T24585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5036'. [ 574.979631][T24585] bridge0: entered promiscuous mode [ 574.986277][T24585] macsec1: entered promiscuous mode [ 575.021308][T24585] macsec1: entered allmulticast mode [ 575.036994][T24585] bridge0: entered allmulticast mode [ 575.048986][T24585] bridge0: port 3(macsec1) entered blocking state [ 575.074983][T24585] bridge0: port 3(macsec1) entered disabled state [ 575.095750][T24585] bridge0: left allmulticast mode [ 575.102616][T24585] bridge0: left promiscuous mode [ 575.451696][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f9e0c00: rx timeout, send abort [ 575.461241][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f9e1000: abort rx timeout. Force session deactivation [ 575.960166][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f9e0c00: abort rx timeout. Force session deactivation [ 579.029991][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5760 ms [ 579.038062][ C0] lec:lec_tx_timeout: lec0 [ 579.043427][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 584.060008][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 584.068323][ C0] lec:lec_tx_timeout: lec0 [ 584.073769][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 589.090298][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 589.098359][ C0] lec:lec_tx_timeout: lec0 [ 589.103444][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 594.120283][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 594.128381][ C0] lec:lec_tx_timeout: lec0 [ 594.133109][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 598.860879][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 599.140150][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 599.148210][ C0] lec:lec_tx_timeout: lec0 [ 599.153161][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 600.996739][T24602] netlink: 'syz.1.5041': attribute type 4 has an invalid length. [ 601.134130][T24615] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5045'. [ 601.403507][T24630] netlink: 'syz.3.5048': attribute type 39 has an invalid length. [ 601.774331][T24642] netlink: 'syz.5.5053': attribute type 12 has an invalid length. [ 601.996645][T24642] bond6: option primary_reselect: invalid value (255) [ 602.047083][T24642] bond6 (unregistering): Released all slaves [ 602.117906][T24648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5055'. [ 602.127541][T24648] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 602.172811][T24648] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 602.190054][T24648] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 602.224733][T24649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5055'. [ 602.300181][T24649] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 602.382628][T24658] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5056'. [ 602.429965][T24652] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.437823][T24652] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.630743][T24652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.656450][T24652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.908578][T24658] geneve2: entered promiscuous mode [ 603.265771][T24689] netlink: 'syz.6.5068': attribute type 1 has an invalid length. [ 603.301083][T24689] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5068'. [ 603.865280][T24712] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5074'. [ 603.888562][T24712] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5074'. [ 604.169995][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 604.178162][ C0] lec:lec_tx_timeout: lec0 [ 604.183440][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 604.301056][T24718] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5077'. [ 604.553300][T24722] netlink: 'syz.3.5078': attribute type 83 has an invalid length. [ 604.633513][T24724] openvswitch: netlink: Missing key (keys=40, expected=80) [ 604.795524][T24706] lo speed is unknown, defaulting to 1000 [ 604.799378][T24731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5082'. [ 604.825909][T24731] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5082'. [ 604.864794][T24735] netlink: 'syz.3.5084': attribute type 10 has an invalid length. [ 604.881567][T24734] netlink: 'syz.3.5084': attribute type 10 has an invalid length. [ 604.913981][T24734] veth0_macvtap: left promiscuous mode [ 604.947032][T24735] netlink: 'syz.3.5084': attribute type 10 has an invalid length. [ 604.970122][T24734] netlink: 'syz.3.5084': attribute type 10 has an invalid length. [ 604.977064][T24735] netlink: 'syz.3.5084': attribute type 10 has an invalid length. [ 606.364327][T24788] __nla_validate_parse: 1 callbacks suppressed [ 606.364349][T24788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5096'. [ 607.036563][T24792] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5097'. [ 607.799764][T24820] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.5106'. [ 607.867609][T24820] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 608.597928][T24829] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5110'. [ 608.631710][T24829] validate_nla: 62 callbacks suppressed [ 608.631733][T24829] netlink: 'syz.5.5110': attribute type 1 has an invalid length. [ 608.850565][T24831] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5110'. [ 608.917173][T24829] bond6: entered promiscuous mode [ 608.936602][T24834] netlink: 'syz.1.5111': attribute type 1 has an invalid length. [ 609.002147][T24829] 8021q: adding VLAN 0 to HW filter on device bond6 [ 609.027279][T24803] lo speed is unknown, defaulting to 1000 [ 609.194270][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 609.202443][ C0] lec:lec_tx_timeout: lec0 [ 609.224593][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 610.072495][T24864] geneve3: left promiscuous mode [ 610.134702][T24864] geneve4: left promiscuous mode [ 610.217557][T24864] sit2: left promiscuous mode [ 610.223046][T24864] sit2: left allmulticast mode [ 610.274990][T24864] bond6: left promiscuous mode [ 610.292595][T10580] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.324322][T10580] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 40454 - 0 [ 610.381322][T10580] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.419072][T10580] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 40454 - 0 [ 610.459322][T10580] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.499293][T10580] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 40454 - 0 [ 610.526007][T10580] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.555554][T10580] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 40454 - 0 [ 610.573655][T24872] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.5121'. [ 610.597896][T24870] syzkaller1: entered promiscuous mode [ 610.613914][T24870] syzkaller1: entered allmulticast mode [ 610.796831][T22864] Bluetooth: hci0: link tx timeout [ 610.805327][T22864] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 610.829062][T24878] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5122'. [ 610.906136][T24882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5123'. [ 610.917506][T24882] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5123'. [ 612.890584][T24896] netlink: 'syz.3.5128': attribute type 1 has an invalid length. [ 612.912023][ T5841] Bluetooth: hci0: command 0x0419 tx timeout [ 613.569165][T24904] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5130'. [ 613.834463][T24912] netlink: 'syz.5.5132': attribute type 51 has an invalid length. [ 615.226531][T24934] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5137'. [ 615.471890][T24917] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 615.480795][T24917] team0: Device macvlan5 is already an upper device of the team interface [ 615.500205][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6270 ms [ 615.508398][ C0] lec:lec_tx_timeout: lec0 [ 615.513471][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 615.867634][T24943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5140'. [ 615.904308][T24943] netlink: 'syz.5.5140': attribute type 3 has an invalid length. [ 615.922713][T24943] netlink: 'syz.5.5140': attribute type 1 has an invalid length. [ 615.960367][T24944] netlink: 63873 bytes leftover after parsing attributes in process `syz.5.5140'. [ 616.041133][T24947] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5141'. [ 616.221687][T24952] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5142'. [ 616.309073][T24954] netlink: 'syz.5.5143': attribute type 1 has an invalid length. [ 616.359669][T24954] netlink: 'syz.5.5143': attribute type 11 has an invalid length. [ 616.368156][T24954] netlink: 'syz.5.5143': attribute type 11 has an invalid length. [ 616.376666][T24954] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5143'. [ 616.407661][T24954] bond7: (slave geneve5): making interface the new active one [ 616.418192][T24954] bond7: (slave geneve5): Enslaving as an active interface with an up link [ 616.437787][ T77] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 616.485340][ T77] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 616.515730][ T77] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 616.538865][ T77] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 616.637603][T24960] xt_hashlimit: size too large, truncated to 1048576 [ 617.256003][T24970] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5149'. [ 617.309603][T24972] netlink: 'syz.3.5149': attribute type 21 has an invalid length. [ 617.476118][T24977] sock: sock_set_timeout: `syz.3.5151' (pid 24977) tries to set negative timeout [ 618.987758][T24990] 8021q: VLANs not supported on wlan0 [ 618.995740][T24993] netlink: 'syz.6.5154': attribute type 25 has an invalid length. [ 619.016704][T24993] netlink: 'syz.6.5154': attribute type 28 has an invalid length. [ 620.294251][T25015] openvswitch: netlink: Duplicate or invalid key (type 0). [ 620.303316][T25015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 621.280811][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5770 ms [ 621.288962][ C0] lec:lec_tx_timeout: lec0 [ 621.309630][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 621.695639][T25005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5155'. [ 622.039761][T25033] syzkaller0: entered promiscuous mode [ 622.079184][T25033] syzkaller0: entered allmulticast mode [ 622.420829][T25046] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 622.590477][T25048] x_tables: duplicate underflow at hook 3 [ 622.667030][ T5841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 622.677961][ T5841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 622.688566][ T5841] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 622.697769][ T5841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 622.705991][ T5841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 624.075252][T25051] lo speed is unknown, defaulting to 1000 [ 624.418853][T25051] chnl_net:caif_netlink_parms(): no params data found [ 624.583186][T25051] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.592425][T25051] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.599769][T25051] bridge_slave_0: entered allmulticast mode [ 624.609068][T25051] bridge_slave_0: entered promiscuous mode [ 624.625005][T25051] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.634382][T25051] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.644063][T25051] bridge_slave_1: entered allmulticast mode [ 624.653656][T25051] bridge_slave_1: entered promiscuous mode [ 624.713470][T25051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.735889][T25051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.780181][ T5841] Bluetooth: hci7: command tx timeout [ 624.802538][T25051] team0: Port device team_slave_0 added [ 624.813993][T25051] team0: Port device team_slave_1 added [ 624.874361][T25051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.881989][T25051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.909608][T25051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.926109][T25051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.935459][T25051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.973108][T25051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.289695][T25051] hsr_slave_0: entered promiscuous mode [ 625.331379][T25051] hsr_slave_1: entered promiscuous mode [ 625.358694][T25051] debugfs: 'hsr0' already exists in 'hsr' [ 625.380652][T25051] Cannot create hsr debugfs directory [ 625.457725][T25081] netlink: 'syz.3.5174': attribute type 1 has an invalid length. [ 625.501179][T25081] nbd: error processing sock list [ 626.462341][T25087] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5176'. [ 626.662299][T25051] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 626.718937][T25089] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5177'. [ 626.865888][ T5841] Bluetooth: hci7: command tx timeout [ 626.916955][T25051] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 626.947089][T25093] nr0: entered promiscuous mode [ 627.005515][T25051] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 627.029445][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5710 ms [ 627.037653][ C0] lec:lec_tx_timeout: lec0 [ 627.060248][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 627.076642][T25051] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 627.121684][T25051] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 627.204238][T25051] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 627.643735][T25051] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 627.707850][T25051] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 627.749197][T25099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5181'. [ 627.769758][T25099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5181'. [ 627.809791][T25103] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 627.854417][T25099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5181'. [ 627.940218][T25099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5181'. [ 628.117782][T25079] lo speed is unknown, defaulting to 1000 [ 628.157145][T25116] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5183'. [ 628.281466][T25123] netlink: 204 bytes leftover after parsing attributes in process `syz.1.5185'. [ 628.493762][T25051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.532276][T25130] netlink: 'syz.1.5187': attribute type 1 has an invalid length. [ 628.551972][T25051] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.592037][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.599388][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.658166][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.665426][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.795598][T25084] lo speed is unknown, defaulting to 1000 [ 628.951338][ T5841] Bluetooth: hci7: command tx timeout [ 628.995539][T25138] macvtap1: entered promiscuous mode [ 629.002817][T25138] macvtap1: entered allmulticast mode [ 629.008693][T25138] veth1_vlan: entered allmulticast mode [ 629.209541][T25141] macvtap2: entered promiscuous mode [ 629.225254][T25141] macvtap2: entered allmulticast mode [ 629.437306][T25051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 629.567244][T25160] netlink: 112 bytes leftover after parsing attributes in process `syz.6.5194'. [ 629.579127][T25160] netlink: 256 bytes leftover after parsing attributes in process `syz.6.5194'. [ 629.589502][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 629.614066][T25160] netlink: 256 bytes leftover after parsing attributes in process `syz.6.5194'. [ 630.252811][T25179] bridge_slave_0: left allmulticast mode [ 630.269582][T25179] bridge_slave_0: left promiscuous mode [ 630.292358][T25179] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.367756][T25179] bridge_slave_1: left allmulticast mode [ 630.400359][T25179] bridge_slave_1: left promiscuous mode [ 630.407321][T25179] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.473734][T25179] bond0: (slave bond_slave_0): Releasing backup interface [ 630.491325][T25179] bond0: (slave bond_slave_1): Releasing backup interface [ 630.515400][T25179] team0: Port device team_slave_0 removed [ 630.563857][T25179] team0: Port device team_slave_1 removed [ 630.570623][T25179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.589325][T25179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.603260][T25179] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 630.837868][T25051] veth0_vlan: entered promiscuous mode [ 630.891493][T25051] veth1_vlan: entered promiscuous mode [ 630.989077][T25051] veth0_macvtap: entered promiscuous mode [ 631.025084][ T5841] Bluetooth: hci7: command tx timeout [ 631.111683][T25217] tunl0: entered promiscuous mode [ 631.143183][T25217] netlink: 'syz.5.5202': attribute type 3 has an invalid length. [ 631.182880][T25051] veth1_macvtap: entered promiscuous mode [ 631.259407][T25051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.279178][T25051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 631.432690][T10580] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.452497][T10580] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.524491][T10580] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.542036][T10580] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.674167][T25241] netlink: 'syz.1.5210': attribute type 2 has an invalid length. [ 631.707491][T25241] v: entered promiscuous mode [ 631.714923][T10579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.742620][T10579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.922308][T10579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.944593][T10579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.080206][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 632.088299][ C0] lec:lec_tx_timeout: lec0 [ 632.088370][T25256] netlink: 'syz.3.5213': attribute type 83 has an invalid length. [ 632.093671][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 632.267497][T25270] __nla_validate_parse: 2 callbacks suppressed [ 632.267517][T25270] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5216'. [ 632.312919][T25273] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5216'. [ 632.635031][T25285] x_tables: duplicate underflow at hook 2 [ 632.761517][T25297] netlink: 'syz.6.5223': attribute type 1 has an invalid length. [ 633.211395][T25318] netlink: 260 bytes leftover after parsing attributes in process `syz.7.5226'. [ 633.723595][T25353] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5234'. [ 633.854754][T25360] syzkaller1: entered promiscuous mode [ 633.871337][T25360] syzkaller1: entered allmulticast mode [ 634.094180][T25371] netlink: 'syz.7.5241': attribute type 3 has an invalid length. [ 634.343678][T25386] netlink: 'syz.6.5243': attribute type 1 has an invalid length. [ 634.456917][T25394] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5243'. [ 634.493461][T25392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5246'. [ 634.559721][T25392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5246'. [ 634.572658][T25390] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 634.583535][T25394] 8021q: adding VLAN 0 to HW filter on device bond2 [ 634.594011][T10580] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 634.724776][ T49] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 634.738436][T25404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 634.903582][T25405] bond5: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 635.154975][T25433] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5259'. [ 635.208203][T25438] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20001 [ 635.271854][T25438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5261'. [ 635.317098][T25438] block nbd0: Unsupported socket: should be TCP or UNIX. [ 635.433162][T25452] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5264'. [ 635.645525][T25457] x_tables: duplicate underflow at hook 3 [ 635.703625][T25469] veth1_to_bridge: entered promiscuous mode [ 635.709595][T25469] veth1_to_bridge: entered allmulticast mode [ 635.779514][T25469] team0: Port device veth1_to_bridge added [ 635.890548][T25469] vxcan3: entered promiscuous mode [ 635.897544][T25479] x_tables: duplicate underflow at hook 2 [ 635.936881][T25476] netlink: 'syz.1.5269': attribute type 1 has an invalid length. [ 635.941377][T25479] netlink: 'syz.5.5272': attribute type 2 has an invalid length. [ 635.982075][T25476] bond2: (slave veth0_to_bond): Releasing active interface [ 636.267885][T25497] netlink: 'syz.1.5277': attribute type 3 has an invalid length. [ 636.389307][T25503] gtp0: entered promiscuous mode [ 636.420115][T25503] gtp0: entered allmulticast mode [ 637.118433][T25528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 637.127810][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 637.127902][ C0] lec:lec_tx_timeout: lec0 [ 637.167871][T25531] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 637.731802][T25551] __nla_validate_parse: 9 callbacks suppressed [ 637.731826][T25551] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5290'. [ 637.792949][T25555] netlink: 244 bytes leftover after parsing attributes in process `syz.5.5290'. [ 637.942756][T25558] delete_channel: no stack [ 638.455026][T25583] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5296'. [ 638.521256][T25587] netlink: 'syz.3.5299': attribute type 2 has an invalid length. [ 638.559709][T25590] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5300'. [ 638.583665][T25590] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5300'. [ 638.595200][T25590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5300'. [ 638.904615][T25605] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5304'. [ 638.922096][T25600] netlink: 'syz.3.5303': attribute type 16 has an invalid length. [ 638.930184][T25600] netlink: 'syz.3.5303': attribute type 17 has an invalid length. [ 638.988878][T25605] bond3 (unregistering): Released all slaves [ 639.020961][T25600] tunl0: left promiscuous mode [ 639.167707][T25621] x_tables: duplicate underflow at hook 2 [ 639.245586][T25600] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 639.450545][T25631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5313'. [ 639.461285][T25631] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5313'. [ 639.480446][T25630] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5312'. [ 639.896085][T25648] lo: entered promiscuous mode [ 639.910519][T25648] tunl0: entered promiscuous mode [ 639.922799][T25648] gre0: entered promiscuous mode [ 639.934983][T25648] gretap0: entered promiscuous mode [ 639.955337][T25648] erspan0: entered promiscuous mode [ 639.979221][T25648] ip_vti0: entered promiscuous mode [ 640.823647][T25687] bond0: Device is already in use. [ 640.829049][T25685] netlink: 'syz.7.5329': attribute type 3 has an invalid length. [ 640.853815][T25689] netlink: 'syz.5.5332': attribute type 51 has an invalid length. [ 640.887016][T25693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 641.238000][T25721] IPVS: Unknown mcast interface: team0 [ 641.266014][T25721] IPVS: Unknown mcast interface: team0 [ 641.276579][T25722] netlink: 'syz.6.5341': attribute type 7 has an invalid length. [ 641.296114][T25722] netlink: 'syz.6.5341': attribute type 8 has an invalid length. [ 641.921445][T25759] netlink: 'syz.7.5354': attribute type 12 has an invalid length. [ 641.949724][T25759] netlink: 'syz.7.5354': attribute type 29 has an invalid length. [ 641.970363][T25759] netlink: 'syz.7.5354': attribute type 2 has an invalid length. [ 641.978758][T25762] lo: left promiscuous mode [ 641.984639][T25762] tunl0: left promiscuous mode [ 641.989540][T25762] gre0: left promiscuous mode [ 641.997019][T25762] gretap0: left promiscuous mode [ 642.005710][T25762] erspan0: left promiscuous mode [ 642.020562][T25762] ip_vti0: left promiscuous mode [ 642.095302][T25762] geneve2: left promiscuous mode [ 642.207117][T10580] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.240033][T10580] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.249000][T10580] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.334477][T10580] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.948187][T25821] __nla_validate_parse: 14 callbacks suppressed [ 642.948294][T25821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5372'. [ 642.977507][T25822] netlink: 'syz.3.5371': attribute type 21 has an invalid length. [ 642.981169][T25819] bond_slave_0: mtu less than device minimum [ 643.006844][T25822] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5371'. [ 643.172182][T25835] xt_hashlimit: invalid rate [ 643.257598][T25840] xt_hashlimit: invalid rate [ 643.788084][T25872] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5387'. [ 646.006375][T25966] netlink: 'syz.1.5410': attribute type 11 has an invalid length. [ 646.060974][T25966] syz.1.5410: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 646.155261][T25966] CPU: 1 UID: 0 PID: 25966 Comm: syz.1.5410 Not tainted syzkaller #0 PREEMPT(full) [ 646.155294][T25966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 646.155307][T25966] Call Trace: [ 646.155316][T25966] [ 646.155325][T25966] dump_stack_lvl+0xe8/0x150 [ 646.155364][T25966] warn_alloc+0x249/0x340 [ 646.155393][T25966] ? stack_trace_save+0xa9/0x100 [ 646.155420][T25966] ? __pfx_warn_alloc+0x10/0x10 [ 646.155454][T25966] ? kasan_save_track+0x4f/0x80 [ 646.155477][T25966] ? kasan_save_track+0x3e/0x80 [ 646.155498][T25966] ? __kasan_kmalloc+0x93/0xb0 [ 646.155521][T25966] ? __kmalloc_cache_noprof+0x31c/0x660 [ 646.155544][T25966] ? xskq_create+0x56/0x170 [ 646.155570][T25966] ? xsk_setsockopt+0x54c/0x990 [ 646.155592][T25966] ? do_sock_setsockopt+0x17c/0x1b0 [ 646.155618][T25966] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 646.155644][T25966] ? do_syscall_64+0x14d/0xf80 [ 646.155679][T25966] __vmalloc_node_range_noprof+0x132/0x1730 [ 646.155739][T25966] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 646.155770][T25966] ? __kasan_kmalloc+0x93/0xb0 [ 646.155824][T25966] vmalloc_user_noprof+0xad/0xe0 [ 646.155850][T25966] ? xskq_create+0xbf/0x170 [ 646.155877][T25966] xskq_create+0xbf/0x170 [ 646.155907][T25966] xsk_init_queue+0x8a/0xe0 [ 646.155937][T25966] xsk_setsockopt+0x54c/0x990 [ 646.155965][T25966] ? __pfx_xsk_setsockopt+0x10/0x10 [ 646.155990][T25966] ? __pfx_aa_sk_perm+0x10/0x10 [ 646.156026][T25966] ? aa_sock_opt_perm+0xff/0x1a0 [ 646.156051][T25966] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 646.156075][T25966] ? __pfx_xsk_setsockopt+0x10/0x10 [ 646.156102][T25966] do_sock_setsockopt+0x17c/0x1b0 [ 646.156135][T25966] __x64_sys_setsockopt+0x13d/0x1b0 [ 646.156168][T25966] do_syscall_64+0x14d/0xf80 [ 646.156196][T25966] ? trace_irq_disable+0x3b/0x150 [ 646.156214][T25966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.156237][T25966] ? clear_bhb_loop+0x40/0x90 [ 646.156263][T25966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.156290][T25966] RIP: 0033:0x7f683cd9c819 [ 646.156311][T25966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.156330][T25966] RSP: 002b:00007f683dc29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 646.156354][T25966] RAX: ffffffffffffffda RBX: 00007f683d015fa0 RCX: 00007f683cd9c819 [ 646.156370][T25966] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 646.156382][T25966] RBP: 00007f683ce32c91 R08: 0000000000000004 R09: 0000000000000000 [ 646.156395][T25966] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.156408][T25966] R13: 00007f683d016038 R14: 00007f683d015fa0 R15: 00007ffddc17b038 [ 646.156444][T25966] [ 646.220975][T25966] Mem-Info: [ 646.278613][T25974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5411'. [ 646.332232][T25966] active_anon:11306 inactive_anon:0 isolated_anon:0 [ 646.332232][T25966] active_file:3013 inactive_file:40150 isolated_file:0 [ 646.332232][T25966] unevictable:768 dirty:59 writeback:0 [ 646.332232][T25966] slab_reclaimable:13792 slab_unreclaimable:138776 [ 646.332232][T25966] mapped:43609 shmem:4239 pagetables:1553 [ 646.332232][T25966] sec_pagetables:0 bounce:0 [ 646.332232][T25966] kernel_misc_reclaimable:0 [ 646.332232][T25966] free:1241092 free_pcp:13598 free_cma:0 [ 646.524792][T25966] Node 0 active_anon:45524kB inactive_anon:0kB active_file:12052kB inactive_file:160388kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:174436kB dirty:232kB writeback:0kB shmem:15420kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17088kB pagetables:6168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 646.595988][T25966] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 646.652408][T25966] Node 0 DMA free:15356kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 646.705241][T25966] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 646.735616][T25966] Node 0 DMA32 free:1020764kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45124kB inactive_anon:0kB active_file:12052kB inactive_file:160388kB unevictable:1536kB writepending:232kB zspages:0kB present:3129332kB managed:2552580kB mlocked:0kB bounce:0kB free_pcp:47532kB local_pcp:24616kB free_cma:0kB [ 646.846109][T25938] lo speed is unknown, defaulting to 1000 [ 646.881700][T25966] lowmem_reserve[]: 0 0 0 0 0 [ 646.914195][T25966] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 646.991947][T25992] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5414'. [ 647.015639][T25966] lowmem_reserve[]: 0 0 0 0 0 [ 647.045418][T25966] Node 1 Normal free:3927200kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:6800kB local_pcp:6800kB free_cma:0kB [ 647.081421][T25994] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5414'. [ 647.169695][T25966] lowmem_reserve[]: 0 0 0 0 0 [ 647.191265][T25966] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15356kB [ 647.243904][T25966] Node 0 DMA32: 6365*4kB (UME) 5539*8kB (UME) 1441*16kB (UME) 169*32kB (UME) 439*64kB (UME) 207*128kB (UME) 338*256kB (UME) 365*512kB (UME) 271*1024kB (UM) 131*2048kB (UM) 14*4096kB (UM) = 1029372kB [ 647.300917][T25966] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 647.313353][T25966] Node 1 Normal: 0*4kB 2*8kB (UM) 1*16kB (M) 2*32kB (UM) 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 958*4096kB (UM) = 3927200kB [ 647.330671][T25966] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 647.373934][T25966] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 647.406929][T25966] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 647.443992][T25966] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 647.511201][T25966] 44543 total pagecache pages [ 647.530024][T25966] 0 pages in swap cache [ 647.534253][T25966] Free swap = 124996kB [ 647.549018][T25966] Total swap = 124996kB [ 647.558779][T25966] 2097051 pages RAM [ 647.568916][T25966] 0 pages HighMem/MovableOnly [ 647.574166][T25966] 427072 pages reserved [ 647.578359][T25966] 0 pages cma reserved [ 647.607786][T26014] netlink: 'syz.7.5419': attribute type 2 has an invalid length. [ 647.636384][T26014] netlink: 'syz.7.5419': attribute type 3 has an invalid length. [ 647.683110][T26014] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5419'. [ 647.713566][T26014] netlink: 100 bytes leftover after parsing attributes in process `syz.7.5419'. [ 647.901206][T26028] xt_hashlimit: size too large, truncated to 1048576 [ 648.051299][T26037] xt_TCPMSS: Only works on TCP SYN packets [ 648.121380][T26040] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5427'. [ 648.323684][T26050] sit0: entered promiscuous mode [ 648.339151][T26050] netlink: 'syz.1.5429': attribute type 1 has an invalid length. [ 648.363379][T26050] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5429'. [ 648.383256][T26051] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 648.390564][T26051] IPv6: NLM_F_CREATE should be set when creating new route [ 648.397930][T26051] IPv6: NLM_F_CREATE should be set when creating new route [ 648.877817][T26078] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5435'. [ 648.886764][T26076] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5434'. [ 648.899790][T26076] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5434'. [ 649.125487][T26085] netlink: 'syz.7.5437': attribute type 1 has an invalid length. [ 649.147804][T26085] netlink: 'syz.7.5437': attribute type 11 has an invalid length. [ 649.164899][T26085] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5437'. [ 649.303266][T26090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5438'. [ 649.397355][T26095] netlink: 'syz.6.5439': attribute type 75 has an invalid length. [ 649.573404][T26099] netlink: 100 bytes leftover after parsing attributes in process `syz.7.5440'. [ 649.990276][T26127] netlink: 'syz.3.5449': attribute type 4 has an invalid length. [ 650.406587][T26146] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.5456'. [ 651.075627][T26188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5466'. [ 651.696011][T26219] syzkaller0: entered promiscuous mode [ 651.716439][T26219] syzkaller0: entered allmulticast mode [ 652.027976][T26243] netlink: 'syz.1.5479': attribute type 1 has an invalid length. [ 652.093473][T26245] pim6reg: entered allmulticast mode [ 652.116909][T26241] syzkaller0: entered promiscuous mode [ 652.129215][T26241] syzkaller0: entered allmulticast mode [ 652.171723][T26245] IPVS: sh: FWM 3 0x00000003 - no destination available [ 652.345279][T26258] netlink: 'syz.1.5485': attribute type 1 has an invalid length. [ 652.748910][T26281] netlink: 'syz.7.5492': attribute type 4 has an invalid length. [ 652.846952][T26284] tc_dump_action: action bad kind [ 652.871028][T26284] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 653.206810][T26307] __nla_validate_parse: 8 callbacks suppressed [ 653.206831][T26307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5502'. [ 653.294690][T26311] vlan3: entered allmulticast mode [ 653.350689][T26311] bridge11: entered allmulticast mode [ 653.412644][T26323] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 653.421571][T26307] erspan0: left allmulticast mode [ 653.424551][T26323] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5506'. [ 653.428933][T26307] erspan0: left promiscuous mode [ 653.450620][T26307] bridge4: port 1(erspan0) entered disabled state [ 653.472545][T26307] bridge11: port 1(erspan0) entered blocking state [ 653.489601][T26307] bridge11: port 1(erspan0) entered disabled state [ 653.508751][T26307] erspan0: entered allmulticast mode [ 653.530998][T26307] erspan0: entered promiscuous mode [ 653.553098][T26307] bridge11: port 1(erspan0) entered blocking state [ 653.559926][T26307] bridge11: port 1(erspan0) entered forwarding state [ 653.576050][T26331] netlink: 'syz.7.5506': attribute type 29 has an invalid length. [ 653.600340][T26331] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5506'. [ 653.614367][T26335] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.5509'. [ 653.851824][T26349] netlink: 'syz.6.5513': attribute type 1 has an invalid length. [ 653.867031][T26349] netlink: 'syz.6.5513': attribute type 2 has an invalid length. [ 653.878160][T26353] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5514'. [ 653.942669][T26340] netlink: 'syz.1.5510': attribute type 10 has an invalid length. [ 653.959145][T26340] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.966566][T26340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.080423][T26340] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 654.147907][T26363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5517'. [ 654.480175][T19161] lec:lec_start_xmit: lec0:No lecd attached [ 654.602413][T26391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5527'. [ 655.028139][T22864] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 655.040789][T22864] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 655.049180][T22864] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 655.072210][T26396] netlink: 'syz.7.5530': attribute type 5 has an invalid length. [ 655.080611][T22864] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 655.088505][T22864] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 655.224310][T26417] netlink: 'syz.5.5533': attribute type 11 has an invalid length. [ 655.397216][T26422] netlink: 'syz.7.5536': attribute type 39 has an invalid length. [ 655.510570][ T1035] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.536613][ T1035] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.643908][T26433] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5539'. [ 655.695932][ T1035] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.717818][ T1035] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.879826][ T1035] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.923725][ T1035] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.937428][T26441] netlink: 'syz.6.5540': attribute type 1 has an invalid length. [ 655.958007][T26443] netlink: 'syz.7.5541': attribute type 1 has an invalid length. [ 655.975640][T26443] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.078041][T26441] 8021q: adding VLAN 0 to HW filter on device bond3 [ 656.163492][T26446] 8021q: adding VLAN 0 to HW filter on device bond3 [ 656.195111][T26446] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 656.278298][T26446] bond3: (slave vcan1): Error -95 calling set_mac_address [ 656.321611][T26455] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5544'. [ 656.417811][ T1035] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 656.428952][ T1035] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.463129][T26461] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5545'. [ 656.483950][T26458] vlan2: entered promiscuous mode [ 656.489275][T26458] erspan0: entered promiscuous mode [ 656.562722][T26408] lo speed is unknown, defaulting to 1000 [ 656.679439][T26467] 8021q: adding VLAN 0 to HW filter on device bond4 [ 656.897508][T26483] syzkaller0: entered promiscuous mode [ 656.925632][T26483] syzkaller0: entered allmulticast mode [ 657.112277][T26489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.180519][ T5841] Bluetooth: hci6: command tx timeout [ 657.458930][ T1035] bridge_slave_0: left allmulticast mode [ 657.475235][ T1035] bridge_slave_0: left promiscuous mode [ 657.492558][ T1035] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.576697][ T1035] erspan0: left allmulticast mode [ 657.601864][ T1035] erspan0: left promiscuous mode [ 657.611790][ T1035] bridge11: port 1(erspan0) entered disabled state [ 657.633324][T26520] x_tables: duplicate underflow at hook 4 [ 658.072153][ T1035] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 658.192944][ T1035] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 658.202858][ T1035] bridge3 (unregistering): left promiscuous mode [ 658.210775][ T1035] bridge3 (unregistering): left allmulticast mode [ 658.360915][ T1035] bond7 (unregistering): (slave bridge5): Releasing backup interface [ 658.426259][ T1035] bond10 (unregistering): (slave bridge6): Removing an active aggregator [ 658.435994][ T1035] bond10 (unregistering): (slave bridge6): Releasing backup interface [ 658.445052][ T1035] bridge6 (unregistering): left promiscuous mode [ 658.451896][ T1035] bridge6 (unregistering): left allmulticast mode [ 658.690942][ T1035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 658.704420][ T1035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 658.715948][ T1035] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 658.728774][ T1035] bond0 (unregistering): Released all slaves [ 658.740545][ T1035] bond1 (unregistering): Released all slaves [ 658.756511][ T1035] bond2 (unregistering): (slave veth5): Releasing active interface [ 658.770669][ T1035] bond2 (unregistering): Released all slaves [ 658.790001][ T1035] bond3 (unregistering): Released all slaves [ 658.804614][ T1035] bond4 (unregistering): Released all slaves [ 658.818203][ T1035] bond5 (unregistering): Released all slaves [ 658.846657][ T1035] bond6 (unregistering): Released all slaves [ 658.860137][ T1035] bond7 (unregistering): Released all slaves [ 658.874333][ T1035] team0: Port device bond8 removed [ 658.881492][ T1035] bond8 (unregistering): Released all slaves [ 658.897023][ T1035] bond9 (unregistering): (slave veth9): Releasing active interface [ 658.915187][ T1035] bond9 (unregistering): Released all slaves [ 658.930310][ T1035] bond10 (unregistering): Released all slaves [ 658.945300][ T1035] bond11 (unregistering): Released all slaves [ 658.959479][ T1035] bond12 (unregistering): Released all slaves [ 659.026441][T26531] bond5: entered promiscuous mode [ 659.032360][T26531] 8021q: adding VLAN 0 to HW filter on device bond5 [ 659.145166][T26544] 8021q: adding VLAN 0 to HW filter on device bond5 [ 659.176923][T26544] bond5: (slave sit1): The slave device specified does not support setting the MAC address [ 659.220525][T26544] bond5: (slave sit1): Error -95 calling set_mac_address [ 659.226685][T26553] __nla_validate_parse: 6 callbacks suppressed [ 659.226703][T26553] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5567'. [ 659.270347][ T5841] Bluetooth: hci6: command tx timeout [ 659.293870][ T1035] : left promiscuous mode [ 659.330798][T26550] validate_nla: 2 callbacks suppressed [ 659.330819][T26550] netlink: 'syz.7.5566': attribute type 4 has an invalid length. [ 659.373148][T26408] chnl_net:caif_netlink_parms(): no params data found [ 659.384096][T26550] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5566'. [ 659.424888][ T1035] v: left promiscuous mode [ 659.607313][ T1035] tipc: Left network mode [ 659.912507][T26408] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.930041][T26408] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.937376][T26408] bridge_slave_0: entered allmulticast mode [ 659.972867][T26408] bridge_slave_0: entered promiscuous mode [ 659.980015][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5500 ms [ 659.988052][ C0] lec:lec_tx_timeout: lec0 [ 660.010916][T26408] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.018262][T26408] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.036895][T26408] bridge_slave_1: entered allmulticast mode [ 660.046093][T26408] bridge_slave_1: entered promiscuous mode [ 660.112471][T26408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.126129][T26562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5569'. [ 660.139140][T26408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.148553][T26562] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5569'. [ 660.157776][T26562] netlink: 'syz.5.5569': attribute type 12 has an invalid length. [ 660.165950][T26562] netlink: 'syz.5.5569': attribute type 11 has an invalid length. [ 660.218751][T26408] team0: Port device team_slave_0 added [ 660.229287][T26408] team0: Port device team_slave_1 added [ 660.275488][T26408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.284143][T26408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.320773][T26408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.334732][T26408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.342284][T26408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.370746][T26408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.381768][T26505] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 660.651996][T26579] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5573'. [ 660.766749][T26408] hsr_slave_0: entered promiscuous mode [ 660.818814][T26408] hsr_slave_1: entered promiscuous mode [ 660.859219][T26408] debugfs: 'hsr0' already exists in 'hsr' [ 660.865880][T26408] Cannot create hsr debugfs directory [ 661.040623][T26586] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5575'. [ 661.067671][T26586] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5575'. [ 661.076376][T26592] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5577'. [ 661.115688][T26586] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5575'. [ 661.199610][T26598] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5577'. [ 661.351164][ T5841] Bluetooth: hci6: command tx timeout [ 661.545180][ T1035] hsr_slave_0: left promiscuous mode [ 661.568766][ T1035] hsr_slave_1: left promiscuous mode [ 661.575796][ T1035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.610008][ T1035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.662349][ T1035] veth1_vlan: left allmulticast mode [ 661.676153][ T1035] veth1_macvtap: left promiscuous mode [ 661.689090][ T1035] veth0_macvtap: left promiscuous mode [ 661.729397][ T1035] veth0_vlan: left promiscuous mode [ 662.448203][ T1035] team0 (unregistering): Port device team_slave_1 removed [ 662.469010][ T1035] team0 (unregistering): Port device team_slave_0 removed [ 662.640951][ T5491] 8021q: adding VLAN 0 to HW filter on device eth1 [ 663.363697][T26675] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 663.425364][ T5841] Bluetooth: hci6: command tx timeout [ 663.557088][ T1035] IPVS: stop unused estimator thread 0... [ 663.889082][T26701] macsec1: entered promiscuous mode [ 664.228311][T26720] netlink: 'syz.5.5607': attribute type 2 has an invalid length. [ 664.278521][T26727] __nla_validate_parse: 6 callbacks suppressed [ 664.278543][T26727] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5609'. [ 664.331887][T26730] netlink: 'syz.6.5609': attribute type 12 has an invalid length. [ 664.339780][T26730] netlink: 190972 bytes leftover after parsing attributes in process `syz.6.5609'. [ 664.389641][T26732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 664.399773][T26408] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 664.418347][T26408] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 664.463041][T26408] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 664.495955][T26408] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 664.512230][T26408] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 664.554270][T26739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5612'. [ 664.576606][T26408] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 664.612315][T26408] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 664.645380][T26408] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 664.653592][T26740] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.5612'. [ 664.688564][T26742] netlink: 'syz.6.5613': attribute type 1 has an invalid length. [ 664.693402][T26739] netlink: 7 bytes leftover after parsing attributes in process `syz.3.5612'. [ 664.700013][T26742] netlink: 'syz.6.5613': attribute type 1 has an invalid length. [ 664.967849][T26408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.034744][T26408] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.095339][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.102600][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.168215][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.175628][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.783797][T26794] netlink: 'syz.7.5626': attribute type 4 has an invalid length. [ 665.806223][T26798] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5627'. [ 665.848221][T26805] netlink: 'syz.7.5626': attribute type 4 has an invalid length. [ 666.048854][T26408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.247606][T26794] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.254922][T26794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.321689][T26805] netlink: 'syz.7.5626': attribute type 5 has an invalid length. [ 666.436252][T26408] veth0_vlan: entered promiscuous mode [ 666.518974][T26408] veth1_vlan: entered promiscuous mode [ 666.666848][T26840] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5635'. [ 666.713577][T26842] "syz.6.5635" (26842) uses obsolete ecb(arc4) skcipher [ 666.734137][T26408] veth0_macvtap: entered promiscuous mode [ 666.782834][T26408] veth1_macvtap: entered promiscuous mode [ 666.855895][T26408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.934605][T26408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.993377][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.006212][T26852] netlink: 208 bytes leftover after parsing attributes in process `syz.7.5638'. [ 667.008840][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.083149][T26851] netlink: 'syz.3.5639': attribute type 1 has an invalid length. [ 667.102378][T26851] netlink: 'syz.3.5639': attribute type 3 has an invalid length. [ 667.121395][T26851] netlink: 'syz.3.5639': attribute type 7 has an invalid length. [ 667.138430][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.170068][T26851] netlink: 'syz.3.5639': attribute type 8 has an invalid length. [ 667.185328][T26851] netlink: 184 bytes leftover after parsing attributes in process `syz.3.5639'. [ 667.242397][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.263554][T26851] NCSI netlink: No device for ifindex 131092 [ 667.326140][T26864] netlink: 260 bytes leftover after parsing attributes in process `syz.6.5642'. [ 667.496627][T10568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.537689][T10568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.638458][T26879] netlink: 'syz.7.5645': attribute type 1 has an invalid length. [ 667.651500][T10568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.671241][T10568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.892699][T26953] IPv6: NLM_F_CREATE should be specified when creating new route [ 669.668797][T26996] syzkaller1: entered promiscuous mode [ 669.684616][T26996] syzkaller1: entered allmulticast mode [ 669.941639][T26999] __nla_validate_parse: 10 callbacks suppressed [ 669.941664][T26999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5671'. [ 670.002385][T26999] syzkaller1: entered promiscuous mode [ 670.008084][T26999] syzkaller1: entered allmulticast mode [ 670.047015][T27001] syzkaller0: entered promiscuous mode [ 670.053216][T27001] syzkaller0: entered allmulticast mode [ 670.334183][T27022] validate_nla: 4 callbacks suppressed [ 670.334204][T27022] netlink: 'syz.1.5678': attribute type 1 has an invalid length. [ 670.425343][T27024] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5679'. [ 670.445858][T27028] netlink: 'syz.6.5680': attribute type 1 has an invalid length. [ 670.554631][T27028] bond6: entered promiscuous mode [ 670.585324][T27028] 8021q: adding VLAN 0 to HW filter on device bond6 [ 670.646102][T27033] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5680'. [ 670.672782][T27028] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5680'. [ 670.738177][T27042] syzkaller0: entered promiscuous mode [ 670.750351][T27042] syzkaller0: entered allmulticast mode [ 670.842375][T27042] x_tables: duplicate underflow at hook 2 [ 670.882077][T27028] bond6: (slave bridge4): making interface the new active one [ 670.900454][T27028] bridge4: entered promiscuous mode [ 670.908390][T27028] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 671.425896][T27073] ipt_REJECT: TCP_RESET invalid for non-tcp [ 671.457232][T27077] netlink: 'syz.6.5693': attribute type 23 has an invalid length. [ 671.535222][T27081] netlink: 'syz.7.5694': attribute type 2 has an invalid length. [ 671.564042][T27081] netlink: 'syz.7.5694': attribute type 3 has an invalid length. [ 671.594047][T27081] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5694'. [ 671.836552][T27093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5698'. [ 671.857678][T27093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 671.885258][T27093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.904303][T27093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 671.922183][T27093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 672.052828][T27103] netlink: 'syz.5.5700': attribute type 39 has an invalid length. [ 672.214605][T27109] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5700'. [ 672.235482][T27115] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 672.254989][T27117] netlink: 'syz.3.5701': attribute type 1 has an invalid length. [ 672.265547][T27119] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5702'. [ 672.344337][T27121] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5701'. [ 672.468667][T27117] 8021q: adding VLAN 0 to HW filter on device bond6 [ 672.542864][T27121] bond6: (slave veth0_to_bond): making interface the new active one [ 672.589287][T27121] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 672.634847][T27125] bond6: entered promiscuous mode [ 672.643850][T27125] veth0_to_bond: entered promiscuous mode [ 672.656780][T27125] bond6: entered allmulticast mode [ 672.670646][T27125] veth0_to_bond: entered allmulticast mode [ 673.158931][T27160] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5711'. [ 673.178981][T27160] netlink: 'syz.3.5711': attribute type 7 has an invalid length. [ 673.197437][T27160] netlink: 'syz.3.5711': attribute type 8 has an invalid length. [ 674.385887][T27193] tipc: Enabled bearer , priority 10 [ 674.403442][T27189] tipc: Enabling of bearer rejected, already enabled [ 674.596002][T27201] netlink: 'syz.5.5720': attribute type 13 has an invalid length. [ 674.834438][T27221] IPVS: length: 193 != 8 [ 675.008115][T27227] __nla_validate_parse: 4 callbacks suppressed [ 675.008135][T27227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5729'. [ 675.080260][T27227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5729'. [ 675.086509][T10573] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.126350][T10573] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.151263][T27232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 675.184726][T10573] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.195135][T10573] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.321919][T27252] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5734'. [ 675.370116][T27252] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5734'. [ 675.616562][T27270] netlink: 1024 bytes leftover after parsing attributes in process `syz.3.5741'. [ 675.626571][T27256] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5737'. [ 675.753433][T27277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5742'. [ 675.890555][T27287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5748'. [ 675.906621][T27287] netlink: 212304 bytes leftover after parsing attributes in process `syz.3.5748'. [ 675.925862][T27287] openvswitch: netlink: Message has 6 unknown bytes. [ 675.941689][T27287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5748'. [ 676.006932][T27293] syzkaller0: entered promiscuous mode [ 676.015960][T27293] syzkaller0: entered allmulticast mode [ 676.119575][T27285] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 676.478328][T27272] lo speed is unknown, defaulting to 1000 [ 677.158476][T27343] IPv6: sit3: Disabled Multicast RS [ 677.165636][T27343] sit3: entered allmulticast mode [ 677.465708][ T7094] IPVS: starting estimator thread 0... [ 677.504233][T27352] IPVS: sh: FWM 3 0x00000003 - no destination available [ 677.570282][T27356] IPVS: using max 28 ests per chain, 67200 per kthread [ 677.677555][T27353] validate_nla: 5 callbacks suppressed [ 677.677576][T27353] netlink: 'syz.1.5766': attribute type 4 has an invalid length. [ 677.710479][T27365] syzkaller0: entered promiscuous mode [ 677.716015][T27365] syzkaller0: entered allmulticast mode [ 677.734450][T27365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.860729][T27368] openvswitch: netlink: Multiple metadata blocks provided [ 678.283996][T27387] netlink: 'syz.6.5774': attribute type 6 has an invalid length. [ 678.828054][T27427] netlink: 'syz.1.5782': attribute type 39 has an invalid length. [ 680.097273][T27468] __nla_validate_parse: 16 callbacks suppressed [ 680.097296][T27468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5796'. [ 680.163146][T27472] FAULT_INJECTION: forcing a failure. [ 680.163146][T27472] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 680.191769][T27472] CPU: 1 UID: 0 PID: 27472 Comm: syz.7.5798 Not tainted syzkaller #0 PREEMPT(full) [ 680.191799][T27472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 680.191811][T27472] Call Trace: [ 680.191819][T27472] [ 680.191827][T27472] dump_stack_lvl+0xe8/0x150 [ 680.191861][T27472] should_fail_ex+0x412/0x560 [ 680.191897][T27472] _copy_from_user+0x2d/0xb0 [ 680.191921][T27472] ___sys_sendmsg+0x1c6/0x360 [ 680.191955][T27472] ? __pfx____sys_sendmsg+0x10/0x10 [ 680.192023][T27472] ? __fget_files+0x2a/0x420 [ 680.192042][T27472] ? __fget_files+0x3a0/0x420 [ 680.192072][T27472] __x64_sys_sendmsg+0x1bd/0x2a0 [ 680.192103][T27472] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 680.192142][T27472] ? __pfx_ksys_write+0x10/0x10 [ 680.192179][T27472] do_syscall_64+0x14d/0xf80 [ 680.192206][T27472] ? trace_irq_disable+0x3b/0x150 [ 680.192224][T27472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.192245][T27472] ? clear_bhb_loop+0x40/0x90 [ 680.192271][T27472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.192291][T27472] RIP: 0033:0x7f9f1c19c819 [ 680.192311][T27472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.192329][T27472] RSP: 002b:00007f9f1d11d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 680.192352][T27472] RAX: ffffffffffffffda RBX: 00007f9f1c415fa0 RCX: 00007f9f1c19c819 [ 680.192367][T27472] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 680.192380][T27472] RBP: 00007f9f1d11d090 R08: 0000000000000000 R09: 0000000000000000 [ 680.192393][T27472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.192405][T27472] R13: 00007f9f1c416038 R14: 00007f9f1c415fa0 R15: 00007ffd8eb529b8 [ 680.192439][T27472] [ 680.524526][T27478] bridge0: port 1(gretap0) entered blocking state [ 680.543325][T27478] bridge0: port 1(gretap0) entered disabled state [ 680.552632][T27478] gretap0: entered allmulticast mode [ 680.587575][T27478] gretap0: entered promiscuous mode [ 680.850937][T27488] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.858467][T27488] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.213496][ T5961] lo speed is unknown, defaulting to 1000 [ 681.252044][ T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.261977][ T5961] syz0: Port: 1 Link DOWN [ 681.266439][ T12] netdevsim netdevsim3 netdevsim1: unset [0, 1] type 1 family 0 port 256 - 0 [ 681.288713][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.298395][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.311988][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 1] type 1 family 0 port 256 - 0 [ 681.341305][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.388610][ T12] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.416418][ T12] netdevsim netdevsim3 netdevsim3: unset [0, 1] type 1 family 0 port 256 - 0 [ 681.419735][T27514] FAULT_INJECTION: forcing a failure. [ 681.419735][T27514] name failslab, interval 1, probability 0, space 0, times 1 [ 681.449761][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.459604][T27514] CPU: 1 UID: 0 PID: 27514 Comm: syz.7.5813 Not tainted syzkaller #0 PREEMPT(full) [ 681.459632][T27514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 681.459643][T27514] Call Trace: [ 681.459650][T27514] [ 681.459658][T27514] dump_stack_lvl+0xe8/0x150 [ 681.459694][T27514] should_fail_ex+0x412/0x560 [ 681.459730][T27514] should_failslab+0xa8/0x100 [ 681.459757][T27514] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 681.459781][T27514] ? __alloc_skb+0x186/0x7d0 [ 681.459802][T27514] ? __alloc_skb+0x1d0/0x7d0 [ 681.459822][T27514] ? __local_bh_enable_ip+0xd0/0x130 [ 681.459860][T27514] __alloc_skb+0x1d0/0x7d0 [ 681.459890][T27514] netlink_sendmsg+0x5d4/0xb40 [ 681.459925][T27514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 681.459952][T27514] ? aa_sock_msg_perm+0xf1/0x1b0 [ 681.459985][T27514] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 681.460012][T27514] ____sys_sendmsg+0x972/0x9f0 [ 681.460051][T27514] ? __pfx_____sys_sendmsg+0x10/0x10 [ 681.460088][T27514] ? import_iovec+0x73/0xa0 [ 681.460117][T27514] ___sys_sendmsg+0x2a5/0x360 [ 681.460149][T27514] ? __pfx____sys_sendmsg+0x10/0x10 [ 681.460214][T27514] ? __fget_files+0x2a/0x420 [ 681.460232][T27514] ? __fget_files+0x3a0/0x420 [ 681.460262][T27514] __x64_sys_sendmsg+0x1bd/0x2a0 [ 681.460292][T27514] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 681.460329][T27514] ? __pfx_ksys_write+0x10/0x10 [ 681.460364][T27514] do_syscall_64+0x14d/0xf80 [ 681.460401][T27514] ? trace_irq_disable+0x3b/0x150 [ 681.460418][T27514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.460438][T27514] ? clear_bhb_loop+0x40/0x90 [ 681.460463][T27514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.460482][T27514] RIP: 0033:0x7f9f1c19c819 [ 681.460500][T27514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.460517][T27514] RSP: 002b:00007f9f1d11d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 681.460539][T27514] RAX: ffffffffffffffda RBX: 00007f9f1c415fa0 RCX: 00007f9f1c19c819 [ 681.460553][T27514] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 681.460566][T27514] RBP: 00007f9f1d11d090 R08: 0000000000000000 R09: 0000000000000000 [ 681.460578][T27514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.460589][T27514] R13: 00007f9f1c416038 R14: 00007f9f1c415fa0 R15: 00007ffd8eb529b8 [ 681.460621][T27514] [ 681.835624][T22864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 681.846896][T22864] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 681.856626][T22864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 681.865376][T22864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 681.873425][T22864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 683.143100][T27573] netlink: 'syz.5.5828': attribute type 1 has an invalid length. [ 683.151315][T27573] netlink: 476 bytes leftover after parsing attributes in process `syz.5.5828'. [ 683.203159][T27573] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.5828'. [ 683.221020][T27524] lo speed is unknown, defaulting to 1000 [ 683.511718][T27595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5832'. [ 683.810298][T27605] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5836'. [ 683.992317][ T5841] Bluetooth: hci5: command tx timeout [ 683.999729][T10568] bridge_slave_1: left allmulticast mode [ 684.035106][T10568] bridge_slave_1: left promiscuous mode [ 684.053407][T10568] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.119347][T10568] bridge_slave_0: left allmulticast mode [ 684.136168][T10568] bridge_slave_0: left promiscuous mode [ 684.159362][T10568] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.456803][T10568] gretap0 (unregistering): left promiscuous mode [ 684.688219][T10568] bond4 (unregistering): (slave bridge3): Removing an active aggregator [ 684.703385][T10568] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 684.711717][T10568] bond4 (unregistering): (slave bridge3): the permanent HWaddr of slave - 46:c0:f6:ca:60:9d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 684.732456][T10568] bridge3 (unregistering): left promiscuous mode [ 684.738902][T10568] bridge3 (unregistering): left allmulticast mode [ 684.804394][T10568] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 684.813132][T10568] bridge4 (unregistering): left promiscuous mode [ 684.819513][T10568] bridge4 (unregistering): left allmulticast mode [ 684.920181][T10568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 684.930685][T10568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 684.943902][T10568] bond0 (unregistering): Released all slaves [ 684.958994][T10568] bond1 (unregistering): Released all slaves [ 684.975987][T10568] bond2 (unregistering): Released all slaves [ 684.989656][T10568] bond3 (unregistering): Released all slaves [ 685.006337][T10568] bond4 (unregistering): Released all slaves [ 685.025600][T10568] bond5 (unregistering): Released all slaves [ 685.040136][T10568] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 685.048792][T10568] veth0_to_bond: left promiscuous mode [ 685.054981][T10568] veth0_to_bond: left allmulticast mode [ 685.062207][T10568] bond6 (unregistering): Released all slaves [ 685.075537][T10568] bond7 (unregistering): Released all slaves [ 685.127409][ T5491] 8021q: adding VLAN 0 to HW filter on device eth1 [ 685.155504][T27524] chnl_net:caif_netlink_parms(): no params data found [ 685.319510][T10568] 9: left promiscuous mode [ 685.483555][T10568] tipc: Left network mode [ 685.499480][T27649] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5844'. [ 685.548821][T27649] bond0: entered promiscuous mode [ 685.574140][T27649] bond0: left promiscuous mode [ 685.656913][T27524] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.681313][T27524] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.704332][T27524] bridge_slave_0: entered allmulticast mode [ 685.726217][T27524] bridge_slave_0: entered promiscuous mode [ 685.747132][T27524] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.769007][T27524] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.786458][T27524] bridge_slave_1: entered allmulticast mode [ 685.807370][T27524] bridge_slave_1: entered promiscuous mode [ 685.889676][T27524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.912432][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 685.944727][T27524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.070483][ T5841] Bluetooth: hci5: command tx timeout [ 686.107283][T27524] team0: Port device team_slave_0 added [ 686.167689][T27524] team0: Port device team_slave_1 added [ 686.208676][T27676] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5848'. [ 686.221005][T27676] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5848'. [ 686.232828][T27524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.241493][T27524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.268916][T27524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.280347][T27677] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5848'. [ 686.289686][T27677] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5848'. [ 686.327601][T27524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.340264][T27524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.375967][T27524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.587023][T27683] x9: renamed from bridge_slave_0 (while UP) [ 686.663583][T27524] hsr_slave_0: entered promiscuous mode [ 686.701881][T27524] hsr_slave_1: entered promiscuous mode [ 686.731493][T27524] debugfs: 'hsr0' already exists in 'hsr' [ 686.737885][T27524] Cannot create hsr debugfs directory [ 687.021613][T10568] hsr_slave_0: left promiscuous mode [ 687.027651][T10568] hsr_slave_1: left promiscuous mode [ 687.726608][T10568] IPVS: stop unused estimator thread 0... [ 688.151007][ T5841] Bluetooth: hci5: command tx timeout [ 688.274457][T27660] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 688.297989][T27681] netlink: 'syz.7.5850': attribute type 1 has an invalid length. [ 688.320749][T27681] netlink: 'syz.7.5850': attribute type 1 has an invalid length. [ 688.328654][T27681] netlink: 9172 bytes leftover after parsing attributes in process `syz.7.5850'. [ 688.359114][T27524] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 688.437274][T27524] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 688.468163][T27524] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 688.489715][T27524] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 688.511415][T27524] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 688.604699][T27524] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 688.643164][T27524] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 688.680637][T27524] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 688.713372][T27708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5856'. [ 688.875791][T27722] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5858'. [ 688.942673][T27724] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5859'. [ 688.953592][T27730] syzkaller0: entered promiscuous mode [ 688.969397][T27730] syzkaller0: entered allmulticast mode [ 689.183807][T27524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.257438][T27524] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.289877][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.297132][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.339642][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.346921][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.402597][T27743] bond7: option resend_igmp: invalid value (32767) [ 689.416394][T27743] bond7: option resend_igmp: allowed values 0 - 255 [ 689.444824][T27743] bond7 (unregistering): Released all slaves [ 689.783210][T27756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 689.856182][T27756] syzkaller1: entered promiscuous mode [ 689.880790][T27756] syzkaller1: entered allmulticast mode [ 690.108156][T27524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 690.222077][ T5841] Bluetooth: hci5: command tx timeout [ 690.256552][T27524] veth0_vlan: entered promiscuous mode [ 690.344110][T27524] veth1_vlan: entered promiscuous mode [ 690.434721][T27524] veth0_macvtap: entered promiscuous mode [ 690.468215][T27524] veth1_macvtap: entered promiscuous mode [ 690.558764][T27524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 690.619165][T27524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 690.671035][T10568] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.756241][T10568] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.777046][T10568] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.837160][T10568] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.030767][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5120 ms [ 691.038868][ C0] lec:lec_tx_timeout: lec0 [ 691.302742][ T2951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.340030][ T2951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.543826][T27815] netlink: 'syz.6.5878': attribute type 1 has an invalid length. [ 691.552597][T27819] : entered promiscuous mode [ 691.586590][T27815] netlink: 'syz.6.5878': attribute type 3 has an invalid length. [ 691.609420][T27815] netlink: 'syz.6.5878': attribute type 7 has an invalid length. [ 691.638460][T27815] netlink: 'syz.6.5878': attribute type 8 has an invalid length. [ 691.679052][T27815] netlink: 184 bytes leftover after parsing attributes in process `syz.6.5878'. [ 691.706617][T27815] NCSI netlink: No device for ifindex 131092 [ 691.717568][T27816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 692.234031][T27840] netlink: 240 bytes leftover after parsing attributes in process `syz.5.5882'. [ 692.243504][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.256477][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.554518][T27851] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 692.567263][T27851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 692.578130][T27847] syzkaller0: entered promiscuous mode [ 692.594153][T27847] syzkaller0: entered allmulticast mode [ 692.943010][ T31] INFO: task syz.0.4866:23931 blocked for more than 143 seconds. [ 692.960612][ T31] Not tainted syzkaller #0 [ 692.965747][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 693.033493][ T31] task:syz.0.4866 state:D stack:26072 pid:23931 tgid:23925 ppid:16690 task_flags:0x400040 flags:0x00080002 [ 693.142626][ T31] Call Trace: [ 693.145994][ T31] [ 693.148963][ T31] __schedule+0x15dd/0x52d0 [ 693.158777][T27861] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 693.199375][ T31] ? __pfx___schedule+0x10/0x10 [ 693.230341][ T31] ? schedule+0x90/0x360 [ 693.234682][ T31] schedule+0x164/0x360 [ 693.238877][ T31] schedule_preempt_disabled+0x13/0x30 [ 693.256821][T27876] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5889'. [ 693.284849][ T31] __mutex_lock+0x7fe/0x1300 [ 693.289559][ T31] ? __mutex_lock+0x5ac/0x1300 [ 693.309967][T27876] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5889'. [ 693.310072][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 693.340865][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 693.345998][ T31] ? stack_trace_save+0xa9/0x100 [ 693.359941][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 693.365385][ T31] nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 693.387216][ T31] ? kasan_save_track+0x4f/0x80 [ 693.394861][ T31] ? kasan_save_track+0x3e/0x80 [ 693.399797][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 693.420627][ T31] ? __alloc_skb+0x2c1/0x7d0 [ 693.425385][ T31] ? netlink_dump+0x1ef/0xe80 [ 693.439919][ T31] ? __netlink_dump_start+0x5cb/0x7e0 [ 693.445357][ T31] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 693.469987][ T31] ? genl_rcv_msg+0x5e8/0x7a0 [ 693.474739][ T31] ? netlink_rcv_skb+0x232/0x4b0 [ 693.479713][ T31] ? genl_rcv+0x28/0x40 [ 693.496517][ T31] ? netlink_unicast+0x80f/0x9b0 [ 693.504652][ T31] ? netlink_sendmsg+0x813/0xb40 [ 693.511147][ T31] ? ____sys_sendmsg+0x972/0x9f0 [ 693.516224][ T31] ? ___sys_sendmsg+0x2a5/0x360 [ 693.531181][ T31] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 693.536555][ T31] ? do_syscall_64+0x14d/0xf80 [ 693.541794][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.560008][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 693.566665][ T31] ? rcu_is_watching+0x15/0xb0 [ 693.582307][ T31] ? trace_kmalloc+0x2a/0x110 [ 693.587075][ T31] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 693.599976][ T31] genl_dumpit+0x10b/0x1b0 [ 693.604482][ T31] netlink_dump+0x722/0xe80 [ 693.620380][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 693.625681][ T31] ? genl_start+0x499/0x6c0 [ 693.631150][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 693.636501][ T31] genl_family_rcv_msg_dumpit+0x213/0x310 [ 693.643005][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 693.649306][ T31] ? genl_get_cmd+0x4a8/0x930 [ 693.654486][ T31] ? __pfx_genl_start+0x10/0x10 [ 693.659376][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 693.665072][ T31] ? __pfx_genl_done+0x10/0x10 [ 693.670326][ T31] genl_rcv_msg+0x5e8/0x7a0 [ 693.674904][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 693.687554][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 693.694500][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 693.699497][ T31] netlink_rcv_skb+0x232/0x4b0 [ 693.704881][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 693.710250][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 693.717366][ T31] ? down_read+0x272/0x2e0 [ 693.722410][ T31] ? genl_rcv+0xd/0x40 [ 693.726535][ T31] genl_rcv+0x28/0x40 [ 693.733320][ T31] netlink_unicast+0x80f/0x9b0 [ 693.738148][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 693.760201][ T31] ? netlink_sendmsg+0x650/0xb40 [ 693.765309][ T31] ? skb_put+0x11b/0x210 [ 693.769618][ T31] netlink_sendmsg+0x813/0xb40 [ 693.780435][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 693.785795][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 693.810255][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 693.816799][ T31] ____sys_sendmsg+0x972/0x9f0 [ 693.829993][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 693.835403][ T31] ? import_iovec+0x73/0xa0 [ 693.849917][ T31] ___sys_sendmsg+0x2a5/0x360 [ 693.854801][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 693.870104][ T31] ? futex_wake+0x4ac/0x580 [ 693.874728][ T31] ? __fget_files+0x2a/0x420 [ 693.879360][ T31] ? __fget_files+0x3a0/0x420 [ 693.900756][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 693.905784][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 693.929976][ T31] ? rcu_is_watching+0x15/0xb0 [ 693.934843][ T31] do_syscall_64+0x14d/0xf80 [ 693.939573][ T31] ? trace_irq_disable+0x3b/0x150 [ 693.959924][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.966108][ T31] ? clear_bhb_loop+0x40/0x90 [ 693.981811][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.987794][ T31] RIP: 0033:0x7f968f99c819 [ 693.999924][ T31] RSP: 002b:00007f96907a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 694.019896][ T31] RAX: ffffffffffffffda RBX: 00007f968fc16090 RCX: 00007f968f99c819 [ 694.028195][ T31] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 0000000000000007 [ 694.037046][ T31] RBP: 00007f968fa32c91 R08: 0000000000000000 R09: 0000000000000000 [ 694.045556][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.053959][ T31] R13: 00007f968fc16128 R14: 00007f968fc16090 R15: 00007ffc2e6bc2a8 [ 694.063130][ T31] [ 694.075119][ T31] [ 694.075119][ T31] Showing all locks held in the system: [ 694.110329][ T31] 1 lock held by khungtaskd/31: [ 694.115246][ T31] #0: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 694.129742][ T31] 3 locks held by kworker/1:2/796: [ 694.141939][ T31] 3 locks held by kworker/u8:7/1035: [ 694.147367][ T31] #0: ffff888031268948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 694.180960][T27878] netlink: 'syz.5.5890': attribute type 2 has an invalid length. [ 694.199893][ T31] #1: ffffc9000470fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 694.259974][ T31] #2: ffffffff8fbd0ec8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 694.269674][ T31] 2 locks held by getty/5584: [ 694.300093][ T31] #0: ffff8880320b80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 694.310452][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 694.321150][ T31] 3 locks held by kworker/1:3/5828: [ 694.327442][ T31] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 694.339012][ T31] #1: ffffc90003ac7c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 694.349776][ T31] #2: ffffffff8e7648b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 694.361131][ T31] 3 locks held by kworker/u8:16/10568: [ 694.366617][ T31] #0: ffff88813fe54148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 694.380577][ T31] #1: ffffc9001bd5fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 694.400347][ T31] #2: ffffffff8fbd0ec8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 694.409394][ T31] 2 locks held by syz.4.2946/16377: [ 694.424125][ T31] #0: ffffffff8fc3ec70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 694.450083][ T31] #1: ffffffff8ea86b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 694.469953][ T31] 3 locks held by syz.0.4866/23931: [ 694.475198][ T31] #0: ffffffff8fc3ec70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 694.490027][ T31] #1: ffff88807e0446f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 694.510243][ T31] #2: ffffffff8ea86b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 694.535803][ T31] 1 lock held by syz-executor/24242: [ 694.549947][ T31] 1 lock held by syz-executor/25051: [ 694.555294][ T31] 1 lock held by syz.7.5880/27827: [ 694.570303][ T31] 2 locks held by syz.1.5889/27875: [ 694.575554][ T31] #0: ffffffff901226f0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 694.601839][ T31] #1: ffffffff8e764780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 694.623563][ T31] 1 lock held by syz.5.5890/27878: [ 694.628733][ T31] #0: ffffffff8fbd0ec8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 694.690008][ T31] [ 694.692438][ T31] ============================================= [ 694.692438][ T31] [ 694.735760][ T31] NMI backtrace for cpu 0 [ 694.735783][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 694.735805][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 694.735818][ T31] Call Trace: [ 694.735826][ T31] [ 694.735835][ T31] dump_stack_lvl+0xe8/0x150 [ 694.735869][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 694.735892][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 694.735921][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 694.735948][ T31] sys_info+0x135/0x170 [ 694.735968][ T31] watchdog+0xfd9/0x1030 [ 694.735993][ T31] ? watchdog+0x21a/0x1030 [ 694.736020][ T31] kthread+0x388/0x470 [ 694.736041][ T31] ? __pfx_watchdog+0x10/0x10 [ 694.736058][ T31] ? __pfx_kthread+0x10/0x10 [ 694.736079][ T31] ret_from_fork+0x51e/0xb90 [ 694.736109][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 694.736133][ T31] ? __switch_to+0xc7d/0x1450 [ 694.736160][ T31] ? __pfx_kthread+0x10/0x10 [ 694.736181][ T31] ret_from_fork_asm+0x1a/0x30 [ 694.736228][ T31] [ 694.736235][ T31] Sending NMI from CPU 0 to CPUs 1: [ 694.851715][ C1] NMI backtrace for cpu 1 [ 694.851737][ C1] CPU: 1 UID: 0 PID: 27827 Comm: syz.7.5880 Not tainted syzkaller #0 PREEMPT(full) [ 694.851758][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 694.851767][ C1] RIP: 0010:kasan_check_range+0x9/0x2c0 [ 694.851795][ C1] Code: c6 b7 e0 16 8e e8 97 20 f8 fe 90 0f 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 55 41 57 41 56 <41> 55 41 54 53 b0 01 48 85 f6 0f 84 ae 01 00 00 4c 8d 04 37 49 39 [ 694.851809][ C1] RSP: 0018:ffffc90002e677d0 EFLAGS: 00000282 [ 694.851825][ C1] RAX: ffff88805769712c RBX: 000000000622033d RCX: ffffffff823a61ec [ 694.851837][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88805769712c [ 694.851848][ C1] RBP: 0000000000000001 R08: ffff8881409a2b67 R09: 1ffff1102813456c [ 694.851859][ C1] R10: dffffc0000000000 R11: ffffed102813456d R12: ffff888057697110 [ 694.851870][ C1] R13: 0000000000000000 R14: ffff88805769712c R15: 000000a1c8635e48 [ 694.851881][ C1] FS: 0000000000000000(0000) GS:ffff888125554000(0000) knlGS:0000000000000000 [ 694.851894][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 694.851905][ C1] CR2: 000055e1f79c2138 CR3: 000000007f3e2000 CR4: 00000000003526f0 [ 694.851922][ C1] Call Trace: [ 694.851929][ C1] [ 694.851937][ C1] __reset_page_owner+0xec/0x1f0 [ 694.851958][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 694.851978][ C1] ? ___free_pages+0xb2/0x220 [ 694.851999][ C1] vfree+0x25a/0x400 [ 694.852017][ C1] xskq_destroy+0x40/0x60 [ 694.852036][ C1] xsk_release+0x709/0x9c0 [ 694.852056][ C1] sock_close+0xc3/0x240 [ 694.852072][ C1] ? __pfx_sock_close+0x10/0x10 [ 694.852087][ C1] __fput+0x44f/0xa70 [ 694.852114][ C1] task_work_run+0x1d9/0x270 [ 694.852133][ C1] ? __pfx_task_work_run+0x10/0x10 [ 694.852149][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 694.852169][ C1] do_exit+0x70f/0x23c0 [ 694.852184][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 694.852208][ C1] ? __pfx_do_exit+0x10/0x10 [ 694.852225][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 694.852260][ C1] do_group_exit+0x21b/0x2d0 [ 694.852276][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 694.852297][ C1] get_signal+0x1284/0x1330 [ 694.852326][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 694.852347][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 694.852374][ C1] exit_to_user_mode_loop+0x86/0x480 [ 694.852391][ C1] ? rcu_is_watching+0x15/0xb0 [ 694.852415][ C1] do_syscall_64+0x32d/0xf80 [ 694.852435][ C1] ? trace_irq_disable+0x3b/0x150 [ 694.852449][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.852465][ C1] ? clear_bhb_loop+0x40/0x90 [ 694.852483][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.852498][ C1] RIP: 0033:0x7f9f1c19c819 [ 694.852512][ C1] Code: Unable to access opcode bytes at 0x7f9f1c19c7ef. [ 694.852520][ C1] RSP: 002b:00007f9f1d0db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 694.852536][ C1] RAX: ffffffffffffffed RBX: 00007f9f1c416180 RCX: 00007f9f1c19c819 [ 694.852547][ C1] RDX: 0000000000000010 RSI: 0000200000000380 RDI: 0000000000000005 [ 694.852558][ C1] RBP: 00007f9f1c232c91 R08: 0000000000000000 R09: 0000000000000000 [ 694.852568][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.852577][ C1] R13: 00007f9f1c416218 R14: 00007f9f1c416180 R15: 00007ffd8eb529b8 [ 694.852597][ C1] [ 695.198350][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 695.205254][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 695.214488][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 695.224657][ T31] Call Trace: [ 695.227959][ T31] [ 695.230902][ T31] vpanic+0x56c/0xa60 [ 695.234965][ T31] ? __pfx___schedule+0x10/0x10 [ 695.239831][ T31] ? __pfx_vpanic+0x10/0x10 [ 695.244363][ T31] ? __pfx_console_unlock+0x10/0x10 [ 695.249586][ T31] panic+0xc5/0xd0 [ 695.253326][ T31] ? __pfx_panic+0x10/0x10 [ 695.257764][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 695.263237][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 695.269496][ T31] watchdog+0x1023/0x1030 [ 695.273923][ T31] ? watchdog+0x21a/0x1030 [ 695.278350][ T31] kthread+0x388/0x470 [ 695.282431][ T31] ? __pfx_watchdog+0x10/0x10 [ 695.287138][ T31] ? __pfx_kthread+0x10/0x10 [ 695.291742][ T31] ret_from_fork+0x51e/0xb90 [ 695.296356][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 695.301482][ T31] ? __switch_to+0xc7d/0x1450 [ 695.306177][ T31] ? __pfx_kthread+0x10/0x10 [ 695.310776][ T31] ret_from_fork_asm+0x1a/0x30 [ 695.315580][ T31] [ 695.318756][ T31] Kernel Offset: disabled [ 695.323089][ T31] Rebooting in 86400 seconds..