last executing test programs: 1m11.413628225s ago: executing program 1 (id=7520): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="cb2da763bb3282b121692bc43eb4105000000003080106000240000000002c"], 0x50}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x700, 0x4e22, 0x28, 0x0, @wg=@data={0x4, 0x0, 0x0, "a6493a7b26e8f5de714f86407ffa223f"}}}}}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f00000002c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_fd={0x18, 0x2, 0x1, 0x0, r3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x98aa, 0x0, 0x0, 0x0, 0xa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @alu={0x0, 0x1, 0x8, 0x3, 0x2, 0x0, 0x1}, @generic={0x80, 0x4, 0x9, 0x7, 0x7}, @jmp={0x5, 0x0, 0xd, 0x8, 0xb, 0x50, 0xfffffffffffffff0}], &(0x7f0000000380)='GPL\x00', 0x7, 0x64, &(0x7f0000000500)=""/100, 0x41100, 0x0, '\x00', r4, 0x0, r2, 0x8, &(0x7f0000000400)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0xa, 0x7fffffff, 0xffff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000600)=[r3, r3, r3, r3, 0xffffffffffffffff], &(0x7f0000000640)=[{0x5, 0x5, 0xc, 0x9}], 0x10, 0x3}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001000370429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="4b010000000000002c0012800b0001006d616373656300001c000280050003000d"], 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r11, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r11, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x800, @loopback={0xff000000}, 0x1, 0xfffffffe}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000280)="f4000900062b2c25fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad6e911b5181", 0x2a}], 0x1}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) writev(r12, &(0x7f00000002c0), 0x2c5) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000340)) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1m10.713870926s ago: executing program 3 (id=7524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000002400048020000180080001006c6f6700140002800800064000008801080005400000000814000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000000180)=0xb, 0x4) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018200000000000006c0000006c0000000200000000000000000000070000000000000000070000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d700000000000000000000000000000000a1d8faf5bd23dd800008"], 0x0, 0x86}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) vmsplice(r2, &(0x7f00000002c0)=[{&(0x7f00000003c0)="32eeef1a00fadf29", 0x8}], 0x1, 0x0) close(r3) (async) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="8f6dcb5707e61096f37538e486dd6372ce230a892f"], 0xffbf) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb07a24f79ee3f86dd60200000000c2f00fc004900000000000000000000000001ff0200000000000000000000000000010000883e000c907801000000"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) r7 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x1, 0x0, 0xf, 0x3, [{0x3, 0x400, 0x2}], 'M6U'}, @datasec={0xc, 0x0, 0x0, 0xf, 0x1, [], '\x00'}]}, {0x0, [0x61, 0x5f, 0x2e]}}, 0x0, 0x45, 0x0, 0x1, 0x1}, 0x28) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r8, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r9, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000000400010000081000418e00000004fcff", 0x58}], 0x1) (async) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000000400010000081000418e00000004fcff", 0x58}], 0x1) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32], 0x1c}}, 0x840) write$nci(r4, &(0x7f0000000bc0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x2, @f_listen={0x4, 0x3, 0x6, 0x82, 0xb, 0x4, 0x6, {0x5, "ee3077ffe4"}, 0x5, 0xb, 0x5, 0xa, 0x4c, "d2585d05d0d3a624e20fddd142cbf209d627c6101a9c517fe433eebd1c63efdade2cfb05d346a1768678da62b5967886f5d271bba694914305dae8c54f7ec5ef13631eb6b2fa27f740b3c915"}}, 0x61) (async) write$nci(r4, &(0x7f0000000bc0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x2, @f_listen={0x4, 0x3, 0x6, 0x82, 0xb, 0x4, 0x6, {0x5, "ee3077ffe4"}, 0x5, 0xb, 0x5, 0xa, 0x4c, "d2585d05d0d3a624e20fddd142cbf209d627c6101a9c517fe433eebd1c63efdade2cfb05d346a1768678da62b5967886f5d271bba694914305dae8c54f7ec5ef13631eb6b2fa27f740b3c915"}}, 0x61) 1m10.680949329s ago: executing program 1 (id=7525): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003f000701feffffff00000000037c0000040042801000018004000000080002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a3100000000140005800800014000008917080002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={0x0, 0xfffffffb}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r4, 0x0, 0x5}, 0x8) r5 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) sendmsg$alg(0xffffffffffffffff, 0x0, 0x20044000) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000f00)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x5a, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @time_exceed={0x3, 0x0, 0x0, 0x8, '\x00', {0x0, 0x6, "aabc2b", 0x2, 0x84, 0x1, @local, @private2, [], "b0f41886cc0680ef33e4e7fb05323492f3fffc7680e572f820c8b170bdfbc4ff610f"}}}}}}, 0x90) (async) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r10, {0x1, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010410800000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0300000000000000200012800b0001006272696467650000100005a39517d602800c002100b00000"], 0x40}}, 0x0) 1m10.41952253s ago: executing program 1 (id=7529): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0000) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xc7, '\x00', 0x86dc, 0x3, 0x100, 0xc}}}}]}, 0x48}}, 0x4000010) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000002540)=0x1) 1m10.366634087s ago: executing program 3 (id=7530): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000300)=0x1000, 0x4) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x11, 0x90, [0x0, 0x0, 0x1000000, 0x0, 0x0, 0x2000000000be], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000011000000ffffffff0000000000000000000000000000000000000000000000000000000000000000010000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fedbdf251f000000080001004e00000008000300", @ANYRES32=r5], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x1400c004) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) setsockopt$sock_int(r6, 0x1, 0x31, &(0x7f0000000200), 0x4) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x6, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(r6, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010004b0400800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000ab5cd3649b79697c0b00010062726964676500201400028008100800810000000600270008000000c4927a454dfa85181bd32ab3530136e43c589aa1504eb9433d9d8d95ff78067e64e6a712b9e7a22f206610fb0eb78dc611dcd0facbf33fc15fec2c9c1c963f56cca864afa3a9e5973d1ae1ee4991b24e08c6fc3a2ba0da38c70f79cea3"], 0x44}}, 0x4) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r11) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r10, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r12, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x10000000) (async) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@deltclass={0x7c, 0x29, 0x8, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x8, 0x5}, {0xffff}, {0xfff1, 0xf}}, [@tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0x1, 0x30}}, @TCA_RATE={0x6, 0x5, {0x3, 0x5}}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x41, 0x6}}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_mqprio={0xb}]}, 0x7c}}, 0x4800) r14 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r14, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) 1m10.365944677s ago: executing program 2 (id=7531): r0 = socket(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe64, 0x3, @local, 0x2}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, &(0x7f00000008c0)="5c4d445d8ae29bc1d5b8ad6d8a98459487277ef223bd736900000000baf60280d3d967f1484ac995a4ef9a1a109ea94c36a001ee049132902cfbdaec64e27bda184c5e4c46685d9bb62996e1691b61c4094a66eb6ec09611261b34c2432c0618cc", 0x0}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r8, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x14, r7, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x200488d0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast2, 0x4e20, 0x4, 0x1, 0x5, 0x2, 0x20}, {0x10002, 0x65ad, 0x1, 0x0, 0xfffffffffffffffb, 0x802b, 0x8000000000000000, 0xfffffffffffffff7}, {0x2, 0x8, 0xfffffffffffffffc, 0x8}, 0x1, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x2, 0x6c}, 0x2, @in=@empty, 0x40000, 0x5, 0x0, 0xb8, 0x10000000}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x0, 0x0) splice(r5, &(0x7f0000000140)=0x200, r9, &(0x7f0000000100)=0x2000000000081, 0x0, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}}) 1m10.285018034s ago: executing program 0 (id=7533): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a000100000000000000000002202000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff010000000000000000000000000001080002"], 0x38}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000204e0000", 0x58}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r4) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r2, 0x4) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r5, 0xffffffffffffffff, 0x29, 0x0, 0x0, @void, @value=r1}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map=r4, 0x6, 0x1, 0x7f, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000200)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0x1, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000500)={0x400, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@ifindex=r7, r1, 0x2e, 0x403f, r1, @void, @void, @void, @value=r8, r6}, 0x20) 1m10.186389596s ago: executing program 3 (id=7534): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) unshare(0x2c060000) unshare(0x22020600) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept$unix(r3, 0x0, 0x0) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f0000000000)) connect$tipc(r1, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x891e) 1m10.141588838s ago: executing program 1 (id=7536): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000030000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a8527f76ec11542b6fcd728b981a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x80c00) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'hsr0\x00', 0xd}) sendmmsg(r3, &(0x7f0000001040)=[{{&(0x7f0000000c00)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000280)}, {&(0x7f0000000c80)}, {&(0x7f0000000d40)}, {&(0x7f0000000300)="b5", 0x1}, {&(0x7f0000000f40)}], 0x5, &(0x7f0000004e00)=[{0x10, 0x109, 0x261}, {0x10, 0x29, 0x3}, {0x18, 0x117, 0x6, "20c4f1a95dd326"}, {0xeb8, 0x1, 0x64, "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"}, {0x38, 0xb9, 0x5, "b83704d37ae0a50fb392e9bf964ec84394707d7ea931748118a8bac0941de860199a5257"}], 0xf28}}], 0x1, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x35, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000009140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x200040d0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r6}, 0x8) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r9 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r9, &(0x7f0000002c80)={0xa, 0x14e24, 0x0, @rand_addr, 0xffff}, 0x1c) connect$inet6(r9, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0xd}, 0x1c) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) 1m10.086901675s ago: executing program 0 (id=7537): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0x4, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1a7fbb}]}, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xbb80}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x9c}}, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000002d00)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f00000005c0)={&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000100)=""/188, 0x1001}], 0x1}, 0x0) getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, 0x0, &(0x7f0000000080)) 1m10.018407021s ago: executing program 0 (id=7538): socketpair(0x22, 0x3, 0x0, &(0x7f0000000780)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a3100000000140005800800014000008917080002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x4}], 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 32) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000400)) 1m9.939523947s ago: executing program 3 (id=7539): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'ip6gretap0\x00'}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)="b6", 0x1}, {&(0x7f0000000580)="b1cdc0a92435041e6be063329729ef5e76ad3fe345f5049c645eea4edf3eac61ac6125c4382bea15999372651c0bedb101c6de3cefe71b3c94b24b07b8aafdf4bdcc2569b869280ee381d3e45f30dbd8e28014119a6036cb506f7a2b2a5039de729d400860c16bc46bebeacfb205403097943553bbef64d6a817d60ca21b7944848733b0e4e78d36219fe86bf2274f10f977fa07fbc307484bc1feaf02343682711f9e4f55c773e427969ba85891fcf67bd340694e5cb9d5c00f376b9c56c24a7515286a8f0955784b81819d216b26cb77c27d976c9faeba5c250cac", 0xdc}, {&(0x7f00000007c0)="67a9692bdd01faed906c6411d8c3a7e0037340873e5a1f6e59dd24d02cac6a000e0000000000000000c5157b4b67317e2e9d65f6f94b47bb606a3b5972a27beec2880dae2aaf9fdf76039f47a0e9956f24bb4a2d94a5a46c4bcc8731b57e2dd876b270bfc262781bfefe470234d1af7089438b0300a46e3098df7afc754445be4f47dfc5548d483f2c9f1608e91ee2050fbbc9ab46e0fddf55f35049c188aaf606ec39f8e96e680d1c0e65", 0xab}, {&(0x7f0000000680)="3568ced1970359734f553b38b7e823cd3e4b260c303ab8f70591545b2a2b14963069f94c3ca955f4bb502b1aeb095ad4c1b37b6b3b62288dfdd4c0b492978a19052e6e96eda0c016236e84100e5f5575853b502832362059529b4c31113a6c6befe743f70b26074f05cb699444c998bd9ed5b1765520c1581b18941abd3d3bd35902afb1637275c1924c35613d7c627f9478b466be188e7ca7b352919595291d82e87bc3127bc04a8575397369098197bc477a5f71b6e53cf90a926505375904", 0xc0}, {&(0x7f0000000980)="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", 0x1b9}], 0x5, 0x0, 0x0, 0x20040890}, 0x2404c800) accept(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x4, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}, {0x9, 0x7, 0x40, 0x80}, {0x3ff, 0xb, 0x3, 0xa6d}]}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0xccd4ddef28b9e90e}, 0x40094) getsockopt$rose(r1, 0x104, 0x7, 0x0, &(0x7f0000000040)=0xfffffffffffffe3b) 1m9.760920133s ago: executing program 3 (id=7540): r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x22020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x39, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e22, @broadcast}}) 1m9.656167349s ago: executing program 2 (id=7542): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x2000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x49}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002280)=@newchain={0x84, 0x64, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x10}, {0xb, 0xffff}, {0xb, 0xffe8}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_flow={{0x9}, {0x4c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xb, 0xfff2}}, @TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8000000, 0x10000000, 0x1ff, 0xfffffffc, 0x81, {0x81, 0x0, 0x8, 0x3ff, 0x4, 0x5}, {0x28, 0x2, 0x4, 0x4000, 0x5, 0x4}, 0x2, 0x6, 0x80000001}}]}]}}]}, 0x84}}, 0x4000) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) r10 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) 1m9.413108875s ago: executing program 1 (id=7544): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000040000000500000002"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000f59400000000000000758fa5f4e06ffb7709b0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r5, 0x29, 0xc9, &(0x7f0000000040)=0x10040a4, 0x4) sendmmsg$inet6(r5, &(0x7f0000000380)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x4000845) recvmmsg(r5, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb30}], 0x1, 0x40002042, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) socket$kcm(0x2, 0x5, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r10, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r11, @ANYRES8=r2], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x40) r12 = getpid() r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r14, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r12}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1m9.411861286s ago: executing program 3 (id=7545): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0)=0x1, 0x4) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) (rerun: 64) unshare(0x62040200) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) (rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) (async) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x0) (async) r6 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r6, 0x0, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8) 1m9.362679141s ago: executing program 0 (id=7546): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000002b40)='cubic', 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = socket$inet(0xa, 0x801, 0x84) listen(r7, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000b40)={0x11b8, 0x34, 0x8, 0x70bd2d, 0x25dfdbfc, {0x10}, [@typed={0x50, 0x12e, 0x0, 0x0, @binary="f70c34e28d7f27706a5cc0df6fb456fb33701c218e00079c546cdd31a4753a825fb37d2634f5882646f24c5618ff09eb5078266dbdc92ba1e370869f1529803288c979a034b2f6836b958c71"}, @typed={0xa6, 0xc3, 0x0, 0x0, @binary="3d323d18f14551a4d6a4b433492d76f83b29f386d0580eb10233766e18dfdf5de7562f8a209163192af5fcae19b48a06da664d5178d583b87883a05d00dc63a473765ec3be1ae1a54543c48fc062d837cbadffdb9df442a3c5719e4e791512087ad5d011e7e8c51eb962e7ab95ec158f6247266ea63165b131c56e05491c02af9e8a8855d4709b1c6a7a92c622bbe2c255cf64c1f82d852ce32ced5b01bf11ac3c23"}, @generic="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", @typed={0x4, 0x22}, @typed={0xa6, 0x108, 0x0, 0x0, @binary="40506794848cc461bb0a5a1155e355ba6da5572bfa6fc7e31b4aa61dc35e148a3bcf5b6e473f27378189f6cc799ff91a07f71c8265579781608039a18daa6151c0ada99d8e7da48d6e4a88e5ef970687d36dd4deeca89e9c7da7a43cbfe00d0ff5b9ad0781ff0974074d53f81e733544ebacf70a0b3f560e3e40e943ca340e73ee3cb300354e5bb13af274d8de95cee08696944e47e82e98d9d081afd98f6af963d3"}]}, 0x11b8}, 0x1, 0x0, 0x0, 0x44000}, 0x1) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f00000004c0)=0x1f) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000480)={'wlan0\x00', {0x2, 0x4e21, @multicast1}}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005200010001000000fcdbdf250a00000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc005}, 0x20000000) 1m9.348595058s ago: executing program 4 (id=7547): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207"], 0x10}}, 0x40044) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200), 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3800004, 0x12, r6, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x400, 0x9, 0x9480, 0x2, 0xff, 0xae, 0x7dd0, {0x0, @in={{0x2, 0x4e24, @remote}}, 0x3, 0x9, 0x80, 0x708, 0x100}}, &(0x7f00000000c0)=0xb0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r9, &(0x7f00000005c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x3ffffffe, @remote, 0x7}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0xc}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400e0000010000304d0ef000000000400fe0000", @ANYRESHEX=r0, @ANYRES16=r3, @ANYRESHEX=r5, @ANYRES8=r6], 0x44}, 0x1, 0x2000000000000000, 0x0, 0x4000004}, 0x10000000) 1m9.157219615s ago: executing program 2 (id=7548): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffc, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\x1c'}]}, @nested={0xfffffffffffffee2, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x6}]}]}, @generic="dc6608f6b5dedeeee9230de8454816", @nested={0x0, 0xf5, 0x0, 0x1, [@typed={0x0, 0x38, 0x0, 0x0, @u64=0x100006}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 59.59460593s ago: executing program 1 (id=7549): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0xc, &(0x7f00000023c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xcb}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc9f1, 0x4, 0x10000005, 0x40, 0x7fffffff}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x87}}]}, 0x90}}, 0x24000040) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = getpid() sendmsg$nl_route(r5, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@getlink={0x54, 0x12, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x120, 0x100}, [@IFLA_NET_NS_PID={0x8, 0x13, r7}, @IFLA_LINK={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xf30e}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1}, @IFLA_TXQLEN={0x8, 0xd, 0x8001}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_IFALIASn={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) write$cgroup_type(r6, &(0x7f00000000c0), 0x9) sendfile(r6, r5, 0x0, 0x10000) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000008000005fc100000300000000400000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0400000003f7ed0005000000000000000000000000000000006b2700"], 0x50) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="ebe3a0e979501a148a0d0b129e6cfd164772219d205e81f4a7f71c1926aae1efd7e005ed863f045cfe6cb55b5bb9fa6935849e6098ed884e7ccb12b672c9f097ca4fe035bbb00400304c09b0294272dfee37fec456574c41ea5cd3860cb2a72de2e1448fdb5f428f5c7fb8f40442d4b9b2bcfb8d5a8dd39ea038222eb4976f868eacd03f282aae735aac5ae16f460275a3f2369b477602669969c3590c7d10e93ebd81cff49585ef40e40b59bfb7a88e32e943f06a05ed228b0d4286d1290000000000000000000000a01e66c50d585ba50e67dd3be3a0a719dcea96541457145e4b4a6c21d882d84cd3934f8ec9f965", 0xf0}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/112, 0x70}, {&(0x7f0000000100)=""/144, 0x90}], 0x2}, 0x40) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r10 = socket$inet6(0x10, 0x2, 0x4) r11 = socket(0x23, 0x80805, 0x0) listen(r11, 0x0) connect$phonet_pipe(r11, &(0x7f0000000080)={0x23, 0xed, 0x80, 0x3}, 0x10) sendto$inet6(r10, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 58.26003206s ago: executing program 4 (id=7550): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'ip6gretap0\x00'}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)="b6", 0x1}, {&(0x7f0000000580)="b1cdc0a92435041e6be063329729ef5e76ad3fe345f5049c645eea4edf3eac61ac6125c4382bea15999372651c0bedb101c6de3cefe71b3c94b24b07b8aafdf4bdcc2569b869280ee381d3e45f30dbd8e28014119a6036cb506f7a2b2a5039de729d400860c16bc46bebeacfb205403097943553bbef64d6a817d60ca21b7944848733b0e4e78d36219fe86bf2274f10f977fa07fbc307484bc1feaf02343682711f9e4f55c773e427969ba85891fcf67bd340694e5cb9d5c00f376b9c56c24a7515286a8f0955784b81819d216b26cb77c27d976c9faeba5c250cac", 0xdc}, {&(0x7f00000007c0)="67a9692bdd01faed906c6411d8c3a7e0037340873e5a1f6e59dd24d02cac6a000e0000000000000000c5157b4b67317e2e9d65f6f94b47bb606a3b5972a27beec2880dae2aaf9fdf76039f47a0e9956f24bb4a2d94a5a46c4bcc8731b57e2dd876b270bfc262781bfefe470234d1af7089438b0300a46e3098df7afc754445be4f47dfc5548d483f2c9f1608e91ee2050fbbc9ab46e0fddf55f35049c188aaf606ec39f8e96e680d1c0e65", 0xab}, {&(0x7f0000000680)="3568ced1970359734f553b38b7e823cd3e4b260c303ab8f70591545b2a2b14963069f94c3ca955f4bb502b1aeb095ad4c1b37b6b3b62288dfdd4c0b492978a19052e6e96eda0c016236e84100e5f5575853b502832362059529b4c31113a6c6befe743f70b26074f05cb699444c998bd9ed5b1765520c1581b18941abd3d3bd35902afb1637275c1924c35613d7c627f9478b466be188e7ca7b352919595291d82e87bc3127bc04a8575397369098197bc477a5f71b6e53cf90a926505375904", 0xc0}, {&(0x7f0000000980)="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", 0x1b9}], 0x5, 0x0, 0x0, 0x20040890}, 0x2404c800) accept(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x4, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}, {0x9, 0x7, 0x40, 0x80}, {0x3ff, 0xb, 0x3, 0xa6d}]}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0xccd4ddef28b9e90e}, 0x40094) getsockopt$rose(r1, 0x104, 0x7, 0x0, &(0x7f0000000040)=0xfffffffffffffe3b) 57.957030116s ago: executing program 2 (id=7551): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = accept(r1, &(0x7f0000000600)=@in6={0xa, 0x0, 0x0, @empty}, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r3, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x0, 0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000", @ANYRESDEC=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff800}, 0x94) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) socket$nl_route(0x10, 0x3, 0x0) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 56.805834838s ago: executing program 0 (id=7552): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x46, &(0x7f0000000040)={0x0, 0x0}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc000000000000000000000000000000ac1e000100"], 0xb8}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000440)=""/222, 0x4000, 0x0, 0x8, 0x1}, 0x20) r4 = socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 51.994915856s ago: executing program 32 (id=7545): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0)=0x1, 0x4) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) (rerun: 64) unshare(0x62040200) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) (rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) (async) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x0) (async) r6 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r6, 0x0, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8) 49.034842286s ago: executing program 2 (id=7554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000190001002dbd7000f8dbdf2502202000ff02ff02001a000008000100ac1414aa0c0009000800281004"], 0x30}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0xf0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/68, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x44}, 0x0) socket$inet(0x2, 0x2, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x25c, 0x18, 0xa, 0x4daead36dc3dfdd5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x1e8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'xfrm0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'dummy0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'syz_tun\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb31}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}], {0x14}}, 0x284}}, 0x0) 47.680178746s ago: executing program 4 (id=7555): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803e00040063636d2861657329"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r2, 0x6, 0x6, 0x0, &(0x7f0000000200)) socket(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000180), &(0x7f0000000240)=0x4) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4008800) 42.474140249s ago: executing program 33 (id=7549): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0xc, &(0x7f00000023c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xcb}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc9f1, 0x4, 0x10000005, 0x40, 0x7fffffff}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x87}}]}, 0x90}}, 0x24000040) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = getpid() sendmsg$nl_route(r5, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@getlink={0x54, 0x12, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x120, 0x100}, [@IFLA_NET_NS_PID={0x8, 0x13, r7}, @IFLA_LINK={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xf30e}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1}, @IFLA_TXQLEN={0x8, 0xd, 0x8001}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_IFALIASn={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) write$cgroup_type(r6, &(0x7f00000000c0), 0x9) sendfile(r6, r5, 0x0, 0x10000) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000008000005fc100000300000000400000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0400000003f7ed0005000000000000000000000000000000006b2700"], 0x50) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="ebe3a0e979501a148a0d0b129e6cfd164772219d205e81f4a7f71c1926aae1efd7e005ed863f045cfe6cb55b5bb9fa6935849e6098ed884e7ccb12b672c9f097ca4fe035bbb00400304c09b0294272dfee37fec456574c41ea5cd3860cb2a72de2e1448fdb5f428f5c7fb8f40442d4b9b2bcfb8d5a8dd39ea038222eb4976f868eacd03f282aae735aac5ae16f460275a3f2369b477602669969c3590c7d10e93ebd81cff49585ef40e40b59bfb7a88e32e943f06a05ed228b0d4286d1290000000000000000000000a01e66c50d585ba50e67dd3be3a0a719dcea96541457145e4b4a6c21d882d84cd3934f8ec9f965", 0xf0}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/112, 0x70}, {&(0x7f0000000100)=""/144, 0x90}], 0x2}, 0x40) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r10 = socket$inet6(0x10, 0x2, 0x4) r11 = socket(0x23, 0x80805, 0x0) listen(r11, 0x0) connect$phonet_pipe(r11, &(0x7f0000000080)={0x23, 0xed, 0x80, 0x3}, 0x10) sendto$inet6(r10, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 42.072687384s ago: executing program 0 (id=7557): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x20000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x3, 0x0, 0xd}, [@NFTA_COMPAT_NAME={0x8, 0x1, 'u32\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000000) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000080)=0x20006) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = epoll_create1(0x80000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r4, @ANYRESOCT=0x0, @ANYRES16=r0, @ANYRESOCT=r1, @ANYRES64=r1, @ANYRESDEC, @ANYRES16=r1, @ANYRES16=r0], 0x50) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r4, @ANYRESOCT=0x0, @ANYRES16=r0, @ANYRESOCT=r1, @ANYRES64=r1, @ANYRESDEC, @ANYRES16=r1, @ANYRES16=r0], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x15, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000003000000000000000700ef00b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000007004f8ff0000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x8b, &(0x7f00000004c0)=""/139, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x3, 0x1, 0xfffffff6}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000580)=[{0x5, 0x2, 0xe, 0x4}, {0x0, 0x4, 0x2, 0x2}, {0x5, 0x5, 0x2, 0x7}, {0x1, 0x5, 0x2, 0x4}, {0x5, 0x4e5be69c, 0xe, 0x8}, {0x5, 0x3, 0x10, 0x3}, {0x5, 0x3, 0xd}], 0x10, 0xff}, 0x94) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x15, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000003000000000000000700ef00b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000007004f8ff0000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x8b, &(0x7f00000004c0)=""/139, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x3, 0x1, 0xfffffff6}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000580)=[{0x5, 0x2, 0xe, 0x4}, {0x0, 0x4, 0x2, 0x2}, {0x5, 0x5, 0x2, 0x7}, {0x1, 0x5, 0x2, 0x4}, {0x5, 0x4e5be69c, 0xe, 0x8}, {0x5, 0x3, 0x10, 0x3}, {0x5, 0x3, 0xd}], 0x10, 0xff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r5}, &(0x7f00000000c0), &(0x7f0000000440)=r6}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000001200)={0x60000010}) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000100)={0xa000000d}) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000100)={0xa000000d}) r8 = epoll_create1(0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000400000000000000000000030000000003000000020000000000000000000000000000010500000008000000020000000000000c0000000000002e"], 0x0, 0x50}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000400000000000000000000030000000003000000020000000000000000000000000000010500000008000000020000000000000c0000000000002e"], 0x0, 0x50}, 0x28) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000300)={0x10000000}) (async) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000300)={0x10000000}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) writev(r9, &(0x7f0000003500)=[{&(0x7f00000035c0)='42', 0x2}], 0x1) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r10, 0xc) (async) listen(r10, 0xc) connect$x25(r10, &(0x7f0000000a80), 0x12) (async) connect$x25(r10, &(0x7f0000000a80), 0x12) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0xfe8ae000) 39.364109916s ago: executing program 2 (id=7558): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5c0000002d006bcd9e3fe3dc6e48ab31086b87033c0000001f03000000000000040014000d000aaf0d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) r2 = accept4(r0, &(0x7f0000000240)=@nl=@unspec, &(0x7f00000002c0)=0x80, 0x800) sendmsg$nl_xfrm(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=@flushpolicy={0x1d0, 0x1d, 0x4, 0x70bd2c, 0x25dfdbff, "", [@algo_crypt={0x57, 0x2, {{'ctr-des3_ede-asm\x00'}, 0x78, "c52f3f50755adbe261162f92f4a5c1"}}, @offload={0xc, 0x1c, {0x0, 0x3}}, @address_filter={0x28, 0x1a, {@in=@empty, @in=@loopback, 0xa, 0x9, 0xf}}, @migrate={0x134, 0x11, [{@in=@broadcast, @in6=@loopback, @in=@private=0xa010100, @in6=@loopback, 0x0, 0x0, 0x0, 0x34ff, 0x2, 0xa}, {@in=@empty, @in6=@mcast1, @in6=@empty, @in=@empty, 0x3c, 0x0, 0x0, 0x3504, 0xa}, {@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010100, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x32, 0x4, 0x0, 0x3504, 0xa, 0xa}, {@in=@remote, @in6=@private2, @in=@private=0xa010101, @in=@multicast1, 0x32, 0x2, 0x0, 0x3500, 0x2, 0xa}]}]}, 0x1d0}}, 0x20008000) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00'}) getpeername$unix(r3, &(0x7f0000000100)=@abs, &(0x7f0000000040)=0x6e) ppoll(&(0x7f0000000000)=[{r0, 0x207}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x9cc7}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x7, 0x0}}, {}, [@call={0x85, 0x0, 0x0, 0xb5}], {{}, {}, {0x85, 0x0, 0x0, 0x89}}}, &(0x7f0000000480)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x48}, 0x94) 39.363215098s ago: executing program 4 (id=7559): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x10, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x3}, 0x94) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x3d}]}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001800)={@cgroup, r0, 0x7}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) 28.504165352s ago: executing program 4 (id=7560): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000740)=ANY=[@ANYBLOB="60000000120000022cbd7000fddbdf25fe8000aa000004d30200ff0014000d00fc020000000000000036ab050000000124000900400000000000000000000000000000000000000000000000040000000000000026b0681366a8cf66b20d4e2d7dc01392c520c9d971f8bd6047eea63e8f13e15e13d0202d4e56352985f304457a32ecda3aa542fc7b52c27099610485c797e7458c16195d6322cbd6709b482f2dd3e51218ba4be353a1910fffd62f1addd5d3c2faa65aa786233c23c848d5ee3409768b1d32e8d13259948fec7a1b0c6fcb83f86f071af8a6cc32e4240b9a74cd"], 0x60}}, 0x20000000) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054) setsockopt(r3, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r6, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$alg(r2, 0x0, 0x4004080) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x3c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_SPEED={0x8}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[], 0x40}}, 0x20024044) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x0, 0x2, 0x70bd23, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="fc000000050000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xa, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000d1bc8df6c2e62989dde3a8183f8fbb000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b703000000000000850000000500000018010000646c6c250000000000202020db1af8ff41000000bda100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24.011513585s ago: executing program 34 (id=7557): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x20000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x3, 0x0, 0xd}, [@NFTA_COMPAT_NAME={0x8, 0x1, 'u32\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000000) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000080)=0x20006) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = epoll_create1(0x80000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r4, @ANYRESOCT=0x0, @ANYRES16=r0, @ANYRESOCT=r1, @ANYRES64=r1, @ANYRESDEC, @ANYRES16=r1, @ANYRES16=r0], 0x50) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r4, @ANYRESOCT=0x0, @ANYRES16=r0, @ANYRESOCT=r1, @ANYRES64=r1, @ANYRESDEC, @ANYRES16=r1, @ANYRES16=r0], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x15, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000003000000000000000700ef00b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000007004f8ff0000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x8b, &(0x7f00000004c0)=""/139, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x3, 0x1, 0xfffffff6}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000580)=[{0x5, 0x2, 0xe, 0x4}, {0x0, 0x4, 0x2, 0x2}, {0x5, 0x5, 0x2, 0x7}, {0x1, 0x5, 0x2, 0x4}, {0x5, 0x4e5be69c, 0xe, 0x8}, {0x5, 0x3, 0x10, 0x3}, {0x5, 0x3, 0xd}], 0x10, 0xff}, 0x94) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x15, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000003000000000000000700ef00b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000007004f8ff0000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x8b, &(0x7f00000004c0)=""/139, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x3, 0x1, 0xfffffff6}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000580)=[{0x5, 0x2, 0xe, 0x4}, {0x0, 0x4, 0x2, 0x2}, {0x5, 0x5, 0x2, 0x7}, {0x1, 0x5, 0x2, 0x4}, {0x5, 0x4e5be69c, 0xe, 0x8}, {0x5, 0x3, 0x10, 0x3}, {0x5, 0x3, 0xd}], 0x10, 0xff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r5}, &(0x7f00000000c0), &(0x7f0000000440)=r6}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000001200)={0x60000010}) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000100)={0xa000000d}) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000100)={0xa000000d}) r8 = epoll_create1(0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000400000000000000000000030000000003000000020000000000000000000000000000010500000008000000020000000000000c0000000000002e"], 0x0, 0x50}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000400000000000000000000030000000003000000020000000000000000000000000000010500000008000000020000000000000c0000000000002e"], 0x0, 0x50}, 0x28) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000300)={0x10000000}) (async) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000300)={0x10000000}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) writev(r9, &(0x7f0000003500)=[{&(0x7f00000035c0)='42', 0x2}], 0x1) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r10, 0xc) (async) listen(r10, 0xc) connect$x25(r10, &(0x7f0000000a80), 0x12) (async) connect$x25(r10, &(0x7f0000000a80), 0x12) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0xfe8ae000) 20.957930482s ago: executing program 35 (id=7558): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5c0000002d006bcd9e3fe3dc6e48ab31086b87033c0000001f03000000000000040014000d000aaf0d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) r2 = accept4(r0, &(0x7f0000000240)=@nl=@unspec, &(0x7f00000002c0)=0x80, 0x800) sendmsg$nl_xfrm(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=@flushpolicy={0x1d0, 0x1d, 0x4, 0x70bd2c, 0x25dfdbff, "", [@algo_crypt={0x57, 0x2, {{'ctr-des3_ede-asm\x00'}, 0x78, "c52f3f50755adbe261162f92f4a5c1"}}, @offload={0xc, 0x1c, {0x0, 0x3}}, @address_filter={0x28, 0x1a, {@in=@empty, @in=@loopback, 0xa, 0x9, 0xf}}, @migrate={0x134, 0x11, [{@in=@broadcast, @in6=@loopback, @in=@private=0xa010100, @in6=@loopback, 0x0, 0x0, 0x0, 0x34ff, 0x2, 0xa}, {@in=@empty, @in6=@mcast1, @in6=@empty, @in=@empty, 0x3c, 0x0, 0x0, 0x3504, 0xa}, {@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010100, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x32, 0x4, 0x0, 0x3504, 0xa, 0xa}, {@in=@remote, @in6=@private2, @in=@private=0xa010101, @in=@multicast1, 0x32, 0x2, 0x0, 0x3500, 0x2, 0xa}]}]}, 0x1d0}}, 0x20008000) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00'}) getpeername$unix(r3, &(0x7f0000000100)=@abs, &(0x7f0000000040)=0x6e) ppoll(&(0x7f0000000000)=[{r0, 0x207}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x9cc7}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x7, 0x0}}, {}, [@call={0x85, 0x0, 0x0, 0xb5}], {{}, {}, {0x85, 0x0, 0x0, 0x89}}}, &(0x7f0000000480)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x48}, 0x94) 17.159213638s ago: executing program 4 (id=7563): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(0xffffffffffffffff, 0x8) socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x23, &(0x7f0000000680)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5a4ace07}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}]}, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCGIDLE(r3, 0x4004743c, &(0x7f0000000100)) shutdown(r0, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f00000002c0)=@raw=[@call={0x85, 0x0, 0x0, 0xab}, @exit], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)={0x38, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 36 (id=7563): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(0xffffffffffffffff, 0x8) socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x23, &(0x7f0000000680)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5a4ace07}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}]}, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCGIDLE(r3, 0x4004743c, &(0x7f0000000100)) shutdown(r0, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f00000002c0)=@raw=[@call={0x85, 0x0, 0x0, 0xab}, @exit], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)={0x38, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): syz.0.6269'. [ 818.049988][T28993] netlink: 540 bytes leftover after parsing attributes in process `syz.0.6269'. [ 818.062568][T28991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6268'. [ 818.166787][T28995] xt_NFQUEUE: number of total queues is 0 [ 818.183816][T28877] team0: Port device team_slave_0 added [ 818.219647][T28877] team0: Port device team_slave_1 added [ 818.352848][T28877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.360956][T29006] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6272'. [ 818.379911][T28877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.406278][T28877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.419206][T28877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.426174][T28877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.461717][T28877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.543190][ T5146] Bluetooth: hci2: command tx timeout [ 818.660993][T29022] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20000 [ 818.722835][T28877] hsr_slave_0: entered promiscuous mode [ 818.746843][T28877] hsr_slave_1: entered promiscuous mode [ 818.769659][T28877] debugfs: 'hsr0' already exists in 'hsr' [ 818.775430][T28877] Cannot create hsr debugfs directory [ 819.075691][T29035] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6279'. [ 820.112137][T29062] netlink: 'syz.4.6286': attribute type 17 has an invalid length. [ 820.386737][T28877] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 820.479772][T28877] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 820.510368][T28877] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 820.530452][T29073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 820.544933][T28877] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 820.617251][ T5146] Bluetooth: hci2: command tx timeout [ 820.690412][T28877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 820.716739][T28877] 8021q: adding VLAN 0 to HW filter on device team0 [ 820.732766][T29062] wg1 speed is unknown, defaulting to 1000 [ 820.743204][T29082] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 820.757210][T29062] wg1 speed is unknown, defaulting to 1000 [ 820.759149][T22281] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.770266][T22281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 820.780432][T29062] vxcan1 speed is unknown, defaulting to 1000 [ 820.792244][T22281] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.799449][T22281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 821.245220][T29062] lo speed is unknown, defaulting to 1000 [ 821.414590][T28877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.011697][T28877] veth0_vlan: entered promiscuous mode [ 822.052119][T28877] veth1_vlan: entered promiscuous mode [ 822.113246][T28877] veth0_macvtap: entered promiscuous mode [ 822.127778][T28877] veth1_macvtap: entered promiscuous mode [ 822.137366][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 822.167870][T28877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 822.182761][T28877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 822.197614][T22281] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.212692][T22281] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.222220][T22281] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.236709][T22281] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.303980][T22276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.312056][T22276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.341544][T22275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.349925][T22275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.410788][T29106] __nla_validate_parse: 5 callbacks suppressed [ 822.410800][T29106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6231'. [ 822.429463][T29106] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6231'. [ 822.438712][T29106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6231'. [ 822.449369][T29106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6231'. [ 822.458912][T29106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6231'. [ 822.469676][T29106] netlink: 'syz.1.6231': attribute type 18 has an invalid length. [ 822.697290][ T5146] Bluetooth: hci2: command tx timeout [ 825.337886][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.417315][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 854.777271][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 857.977547][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.897443][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 868.763835][T29117] netlink: 'syz.3.6297': attribute type 22 has an invalid length. [ 868.788275][T29109] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6294'. [ 868.826500][T29117] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6297'. [ 868.902870][T29124] netlink: 'syz.4.6300': attribute type 1 has an invalid length. [ 868.979351][T29124] 8021q: adding VLAN 0 to HW filter on device bond1 [ 868.988542][T29130] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6301'. [ 868.990022][T29137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6301'. [ 869.009912][T29130] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6301'. [ 869.045646][T29134] bond1: (slave geneve2): making interface the new active one [ 869.065706][T29134] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 869.137903][T27810] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 869.167917][T22280] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 869.247625][T27810] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 869.290912][T29146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6305'. [ 869.315199][T29146] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6305'. [ 869.345542][T29146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6305'. [ 869.357449][T29153] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 869.378798][T29146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6305'. [ 869.406624][T29146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6305'. [ 869.433533][T29146] netlink: 'syz.0.6305': attribute type 18 has an invalid length. [ 869.967282][T29165] wg1 speed is unknown, defaulting to 1000 [ 869.978922][T29165] wg1 speed is unknown, defaulting to 1000 [ 869.988632][T29165] vxcan1 speed is unknown, defaulting to 1000 [ 870.144165][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 870.227980][ T8529] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 870.236399][ T8529] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 870.429042][T29186] netlink: 'syz.4.6317': attribute type 1 has an invalid length. [ 870.740925][T29194] netlink: 'syz.4.6319': attribute type 23 has an invalid length. [ 870.833205][T29190] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.018487][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 871.028841][T29190] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.209228][T29165] lo speed is unknown, defaulting to 1000 [ 871.260311][T29176] wg1 speed is unknown, defaulting to 1000 [ 871.355602][T29176] wg1 speed is unknown, defaulting to 1000 [ 871.407693][T29176] vxcan1 speed is unknown, defaulting to 1000 [ 871.913573][T29210] bridge1: entered allmulticast mode [ 872.073966][T29215] syzkaller0: entered promiscuous mode [ 872.087182][T29215] syzkaller0: entered allmulticast mode [ 872.167847][T29215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.406608][T29220] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.413836][T29220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.445010][T29220] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.452247][T29220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.717796][T29202] wg1 speed is unknown, defaulting to 1000 [ 872.718299][T29176] lo speed is unknown, defaulting to 1000 [ 872.805095][T29202] wg1 speed is unknown, defaulting to 1000 [ 873.072191][T29202] vxcan1 speed is unknown, defaulting to 1000 [ 873.786003][T29202] lo speed is unknown, defaulting to 1000 [ 873.918863][T29250] __nla_validate_parse: 3 callbacks suppressed [ 873.918882][T29250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6330'. [ 873.977448][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 874.200809][T29253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6331'. [ 874.230104][T29253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6331'. [ 874.248662][T29253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6331'. [ 874.284431][T29253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6331'. [ 874.315852][T29253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6331'. [ 874.350692][T29256] netlink: 'syz.1.6332': attribute type 11 has an invalid length. [ 874.359944][T29253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6331'. [ 874.374255][T29258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6333'. [ 874.383901][T29253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6331'. [ 874.396741][T29253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6331'. [ 874.617661][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 874.670092][T29267] 8021q: VLANs not supported on vcan0 [ 875.036148][T29260] wg1 speed is unknown, defaulting to 1000 [ 875.057834][T29260] wg1 speed is unknown, defaulting to 1000 [ 875.088767][T29260] vxcan1 speed is unknown, defaulting to 1000 [ 875.346844][T29290] netlink: 'syz.4.6338': attribute type 1 has an invalid length. [ 875.602987][T29295] netlink: 'syz.1.6340': attribute type 12 has an invalid length. [ 875.757723][T29260] lo speed is unknown, defaulting to 1000 [ 875.778852][T29304] team0: Device gtp0 is of different type [ 875.897657][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 875.905733][ C0] lec:lec_tx_timeout: lec0 [ 876.161075][T29315] netlink: 'syz.0.6345': attribute type 11 has an invalid length. [ 876.460629][T29323] dvmrp0: entered allmulticast mode [ 876.605084][T29330] netlink: 'syz.4.6348': attribute type 1 has an invalid length. [ 876.819639][T29341] netlink: 'syz.4.6350': attribute type 1 has an invalid length. [ 877.091221][T29348] xt_hashlimit: size too large, truncated to 1048576 [ 877.493872][T29368] netlink: 'syz.1.6359': attribute type 2 has an invalid length. [ 877.829732][T29381] bridge0: port 3(gretap0) entered blocking state [ 877.849226][T29381] bridge0: port 3(gretap0) entered disabled state [ 877.864418][T29381] gretap0: entered allmulticast mode [ 877.912863][T29381] gretap0: entered promiscuous mode [ 877.942107][T29381] bridge0: port 3(gretap0) entered blocking state [ 877.948797][T29381] bridge0: port 3(gretap0) entered forwarding state [ 878.351081][T29370] wg1 speed is unknown, defaulting to 1000 [ 878.360891][T29370] wg1 speed is unknown, defaulting to 1000 [ 878.369751][T29370] vxcan1 speed is unknown, defaulting to 1000 [ 879.014798][T29398] wg1 speed is unknown, defaulting to 1000 [ 879.029672][T29398] wg1 speed is unknown, defaulting to 1000 [ 879.031668][T29370] lo speed is unknown, defaulting to 1000 [ 879.038161][T29398] vxcan1 speed is unknown, defaulting to 1000 [ 879.423391][T29398] lo speed is unknown, defaulting to 1000 [ 879.688836][T29423] __nla_validate_parse: 60 callbacks suppressed [ 879.688859][T29423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6371'. [ 879.704657][T29423] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6371'. [ 879.747630][T29423] netlink: 'syz.3.6371': attribute type 1 has an invalid length. [ 879.756533][T29423] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6371'. [ 879.950638][T29431] Cannot find add_set index 2 as target [ 880.220117][T29439] netlink: 'syz.3.6374': attribute type 1 has an invalid length. [ 880.627236][ T5929] IPVS: starting estimator thread 0... [ 880.635894][T29449] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6377'. [ 880.658193][T29449] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6377'. [ 880.737116][T29451] IPVS: using max 29 ests per chain, 69600 per kthread [ 880.918168][T29453] 8021q: VLANs not supported on ip6gre0 [ 880.948919][T29453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6376'. [ 881.232774][T29449] IPVS: length: 141 != 8 [ 881.918712][T29475] vlan2: entered allmulticast mode [ 882.035471][T29454] wg1 speed is unknown, defaulting to 1000 [ 882.072318][T29454] wg1 speed is unknown, defaulting to 1000 [ 882.144305][T29454] vxcan1 speed is unknown, defaulting to 1000 [ 882.521443][T29469] wg1 speed is unknown, defaulting to 1000 [ 882.530757][T29469] wg1 speed is unknown, defaulting to 1000 [ 882.812904][T29469] vxcan1 speed is unknown, defaulting to 1000 [ 882.821226][T29454] lo speed is unknown, defaulting to 1000 [ 882.823560][T29489] wg1 speed is unknown, defaulting to 1000 [ 883.077126][T29489] wg1 speed is unknown, defaulting to 1000 [ 883.127517][T29513] Bluetooth: MGMT ver 1.23 [ 883.413643][T29458] wg1 speed is unknown, defaulting to 1000 [ 883.428654][T29458] wg1 speed is unknown, defaulting to 1000 [ 883.492134][T29489] vxcan1 speed is unknown, defaulting to 1000 [ 883.577757][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 883.817657][T29458] vxcan1 speed is unknown, defaulting to 1000 [ 883.827998][T29469] lo speed is unknown, defaulting to 1000 [ 883.889260][T29489] lo speed is unknown, defaulting to 1000 [ 883.995719][T29523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6394'. [ 884.058661][T29525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6394'. [ 884.491172][T29521] syzkaller1: entered promiscuous mode [ 884.507156][T29521] syzkaller1: entered allmulticast mode [ 884.769014][T29458] lo speed is unknown, defaulting to 1000 [ 885.070170][T29528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6395'. [ 885.081580][T29528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6395'. [ 885.113186][T29528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6395'. [ 885.138395][T29528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6395'. [ 885.257203][ T52] Bluetooth: hci2: command 0x0401 tx timeout [ 885.263425][ T5146] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 886.688713][T29548] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6402'. [ 887.074957][T29562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6408'. [ 887.368525][T29573] veth1_macvtap: left promiscuous mode [ 887.381224][T29573] macsec0: entered allmulticast mode [ 887.426374][T29573] veth1_macvtap: entered promiscuous mode [ 887.467247][T29573] veth1_macvtap: entered allmulticast mode [ 887.473233][T29573] macsec0: left allmulticast mode [ 887.504168][T29573] veth1_macvtap: left allmulticast mode [ 887.678149][T29578] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6413'. [ 888.416489][T29580] wg1 speed is unknown, defaulting to 1000 [ 888.441166][T29580] wg1 speed is unknown, defaulting to 1000 [ 888.450007][T29609] netlink: 'syz.1.6421': attribute type 29 has an invalid length. [ 888.459969][T29580] vxcan1 speed is unknown, defaulting to 1000 [ 888.474788][T29609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6421'. [ 888.483909][T29609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 888.491516][T29609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 888.513311][T29611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6423'. [ 888.532976][T29609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 888.561668][T29614] netlink: 'syz.4.6424': attribute type 1 has an invalid length. [ 888.571397][T29614] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6424'. [ 888.589272][T29609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 888.596566][T29615] netlink: 'syz.4.6424': attribute type 1 has an invalid length. [ 888.638431][T29619] netlink: 'syz.3.6423': attribute type 1 has an invalid length. [ 888.653769][T29611] : entered promiscuous mode [ 888.692373][T29619] bond1: entered promiscuous mode [ 888.698175][T29619] 8021q: adding VLAN 0 to HW filter on device bond1 [ 888.809748][T29580] lo speed is unknown, defaulting to 1000 [ 889.117899][T29637] netlink: 'syz.3.6430': attribute type 46 has an invalid length. [ 889.257835][T29648] x_tables: duplicate underflow at hook 1 [ 889.399790][T29651] team0: entered promiscuous mode [ 889.425097][T29651] team_slave_0: entered promiscuous mode [ 889.446432][T29651] team_slave_1: entered promiscuous mode [ 889.563474][T29633] wg1 speed is unknown, defaulting to 1000 [ 889.614009][T29633] wg1 speed is unknown, defaulting to 1000 [ 889.666358][T29633] vxcan1 speed is unknown, defaulting to 1000 [ 890.143148][T29683] __nla_validate_parse: 7 callbacks suppressed [ 890.143224][T29683] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6445'. [ 890.207850][T29633] lo speed is unknown, defaulting to 1000 [ 890.496801][T29695] netlink: 'syz.4.6447': attribute type 13 has an invalid length. [ 890.592764][T29700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6449'. [ 890.603417][T29700] netlink: 'syz.0.6449': attribute type 1 has an invalid length. [ 890.613370][T29700] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6449'. [ 890.640722][T29701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6448'. [ 890.719482][T29703] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6448'. [ 890.779637][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.213520][T29691] wg1 speed is unknown, defaulting to 1000 [ 891.234037][T29691] wg1 speed is unknown, defaulting to 1000 [ 891.268207][T29691] vxcan1 speed is unknown, defaulting to 1000 [ 891.341558][T29720] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 891.347472][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.451799][T29724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6453'. [ 891.582398][T29730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6455'. [ 891.671140][T29730] netlink: 'syz.0.6455': attribute type 10 has an invalid length. [ 891.762307][T29730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 891.792079][T29730] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 891.940662][T29691] lo speed is unknown, defaulting to 1000 [ 892.138410][T29738] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.530132][T29738] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.643166][T29738] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.852027][T29738] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.909312][T29748] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6461'. [ 893.001632][T29749] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6461'. [ 893.035928][T29749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6461'. [ 893.121020][T29756] veth0_macvtap: left promiscuous mode [ 893.207188][T22281] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.297392][T22281] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.308811][ T8529] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.345806][ T8529] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.791640][T22280] syzkaller0: tun_net_xmit 76 [ 893.810933][T22280] syzkaller0: tun_net_xmit 48 [ 893.817684][ T5929] syzkaller0: tun_net_xmit 76 [ 893.853521][T29788] tipc: Started in network mode [ 893.866856][T29788] tipc: Node identity , cluster identity 4711 [ 893.893801][T29788] tipc: Failed to obtain node identity [ 893.904431][T29788] tipc: Enabling of bearer rejected, failed to enable media [ 893.913622][ T10] syzkaller0: tun_net_xmit 76 [ 894.049221][T29796] 8021q: adding VLAN 0 to HW filter on device bond2 [ 894.495743][T29815] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 896.361127][T29783] wg1 speed is unknown, defaulting to 1000 [ 896.375259][T29783] wg1 speed is unknown, defaulting to 1000 [ 896.394281][T29783] vxcan1 speed is unknown, defaulting to 1000 [ 896.605471][T29835] netlink: 'syz.4.6484': attribute type 21 has an invalid length. [ 896.643155][T29835] __nla_validate_parse: 132 callbacks suppressed [ 896.643201][T29835] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6484'. [ 896.986695][T29783] lo speed is unknown, defaulting to 1000 [ 897.072850][T29852] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6491'. [ 897.302222][T29861] netlink: 'syz.2.6494': attribute type 2 has an invalid length. [ 897.629229][T29866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 897.697477][T29856] wg1 speed is unknown, defaulting to 1000 [ 897.705211][T29856] wg1 speed is unknown, defaulting to 1000 [ 897.720448][T29856] vxcan1 speed is unknown, defaulting to 1000 [ 897.820226][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 898.199217][T29875] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.272553][T29877] syz_tun: entered promiscuous mode [ 898.286253][T29877] macvtap1: entered promiscuous mode [ 898.307832][T29880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6500'. [ 898.339162][T29877] syz_tun: left promiscuous mode [ 898.476793][T29875] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.586848][T29856] lo speed is unknown, defaulting to 1000 [ 898.587159][T29868] wg1 speed is unknown, defaulting to 1000 [ 898.649267][T29868] wg1 speed is unknown, defaulting to 1000 [ 898.681450][T29875] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.726322][T29868] vxcan1 speed is unknown, defaulting to 1000 [ 898.757277][T29875] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.966145][T29886] lo: entered allmulticast mode [ 899.006034][T29888] netlink: 'syz.0.6504': attribute type 11 has an invalid length. [ 899.015530][T29886] lo: left allmulticast mode [ 899.027388][T22275] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.068614][T22279] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.158031][T29868] lo speed is unknown, defaulting to 1000 [ 899.173583][T29886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6503'. [ 899.199549][T22275] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.213700][T22275] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.368355][T29893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6505'. [ 899.553117][T29899] vcan0: tx drop: invalid da for name 0x0000000000ee0000 [ 899.565462][T29899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6509'. [ 899.618926][T29903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6509'. [ 900.616170][T29928] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6517'. [ 900.813889][T29933] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 900.830804][T29934] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6519'. [ 900.860608][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 900.927283][T29936] tipc: Started in network mode [ 900.932333][T29936] tipc: Node identity a64fe9b8bcdc, cluster identity 4711 [ 900.940096][T29936] tipc: Enabled bearer , priority 0 [ 900.949420][T29936] syzkaller0: entered promiscuous mode [ 900.955074][T29936] syzkaller0: entered allmulticast mode [ 901.064147][T29936] tipc: Resetting bearer [ 901.190885][T29938] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6523'. [ 901.211527][T29935] tipc: Resetting bearer [ 901.254806][T29935] tipc: Disabling bearer [ 901.277177][T29923] wg1 speed is unknown, defaulting to 1000 [ 901.298848][T29923] wg1 speed is unknown, defaulting to 1000 [ 901.321559][T29923] vxcan1 speed is unknown, defaulting to 1000 [ 901.369733][T29948] bridge1: port 1(ip6gretap1) entered blocking state [ 901.378117][T29948] bridge1: port 1(ip6gretap1) entered disabled state [ 901.395508][T29948] ip6gretap1: entered allmulticast mode [ 901.403986][T29948] ip6gretap1: entered promiscuous mode [ 901.486168][T29949] bridge1: port 2(veth3) entered blocking state [ 901.505303][T29949] bridge1: port 2(veth3) entered disabled state [ 901.515489][T29949] veth3: entered allmulticast mode [ 901.525713][T29949] veth3: entered promiscuous mode [ 901.532310][T29949] bridge1: port 2(veth3) entered blocking state [ 901.538780][T29949] bridge1: port 2(veth3) entered forwarding state [ 901.596929][T22275] bridge1: port 2(veth3) entered disabled state [ 901.643725][T29918] wg1 speed is unknown, defaulting to 1000 [ 901.656159][T29918] wg1 speed is unknown, defaulting to 1000 [ 901.701848][T29956] __nla_validate_parse: 2 callbacks suppressed [ 901.701866][T29956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6528'. [ 901.855797][T29918] vxcan1 speed is unknown, defaulting to 1000 [ 901.868225][T29923] lo speed is unknown, defaulting to 1000 [ 902.392350][T29970] wg1 speed is unknown, defaulting to 1000 [ 902.408285][T29918] lo speed is unknown, defaulting to 1000 [ 902.419084][T29970] wg1 speed is unknown, defaulting to 1000 [ 902.420171][T29976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6534'. [ 902.426589][T29970] vxcan1 speed is unknown, defaulting to 1000 [ 902.693780][T29976] team0 (unregistering): Port device team_slave_0 removed [ 902.708663][T29976] team0 (unregistering): Port device team_slave_1 removed [ 902.721739][T29976] team0 (unregistering): Port device dummy0 removed [ 902.815808][T29970] lo speed is unknown, defaulting to 1000 [ 902.870722][ T5146] block nbd2: Receive control failed (result -32) [ 902.937078][ T5146] Bluetooth: hci5: command 0x041b tx timeout [ 903.298866][T29984] netlink: 'syz.3.6536': attribute type 1 has an invalid length. [ 903.306892][T29984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6536'. [ 903.623562][T29997] netlink: 'syz.2.6542': attribute type 21 has an invalid length. [ 903.647271][T29997] netlink: 'syz.2.6542': attribute type 1 has an invalid length. [ 903.665319][T29997] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6542'. [ 904.193804][T27807] IPVS: starting estimator thread 0... [ 904.244953][T30022] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6546'. [ 904.259174][T30022] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6546'. [ 904.287558][T30019] IPVS: using max 28 ests per chain, 67200 per kthread [ 904.485583][T30015] ip6tnl0: Caught tx_queue_len zero misconfig [ 904.494886][T30015] IPVS: length: 141 != 8 [ 904.975752][T30011] wg1 speed is unknown, defaulting to 1000 [ 905.114784][T30011] wg1 speed is unknown, defaulting to 1000 [ 905.149259][T30011] vxcan1 speed is unknown, defaulting to 1000 [ 905.397101][T30016] wg1 speed is unknown, defaulting to 1000 [ 905.413125][T30016] wg1 speed is unknown, defaulting to 1000 [ 905.576907][T30055] netlink: 'syz.1.6555': attribute type 4 has an invalid length. [ 905.590819][T30055] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6555'. [ 905.629319][T30056] netlink: 'syz.4.6556': attribute type 1 has an invalid length. [ 905.631734][T30016] vxcan1 speed is unknown, defaulting to 1000 [ 905.695667][T30011] lo speed is unknown, defaulting to 1000 [ 905.748944][T30058] 8021q: adding VLAN 0 to HW filter on device bond4 [ 905.761923][T30058] bond3: (slave bond4): making interface the new active one [ 905.777841][T30058] bond3: (slave bond4): Enslaving as an active interface with an up link [ 905.897589][T30041] wg1 speed is unknown, defaulting to 1000 [ 905.905685][T30041] wg1 speed is unknown, defaulting to 1000 [ 906.108173][ T30] audit: type=1800 audit(1764280580.582:15): pid=30065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6558" name="memory.events" dev="tmpfs" ino=544 res=0 errno=0 [ 906.176737][T30061] wg1 speed is unknown, defaulting to 1000 [ 906.191270][T30041] vxcan1 speed is unknown, defaulting to 1000 [ 906.227479][T30069] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6559'. [ 906.238836][T30069] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6559'. [ 906.380213][T30069] IPVS: length: 141 != 8 [ 906.408747][T30016] lo speed is unknown, defaulting to 1000 [ 906.418794][T30061] wg1 speed is unknown, defaulting to 1000 [ 906.443876][T30041] lo speed is unknown, defaulting to 1000 [ 906.456461][T30061] vxcan1 speed is unknown, defaulting to 1000 [ 906.992325][T30081] netlink: 'syz.4.6562': attribute type 4 has an invalid length. [ 907.052711][T30080] netlink: 'syz.4.6562': attribute type 4 has an invalid length. [ 907.155417][T30061] lo speed is unknown, defaulting to 1000 [ 907.503733][T30087] : entered promiscuous mode [ 908.164520][T30097] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6568'. [ 908.256576][T30097] ip6gre1: entered promiscuous mode [ 908.268715][T30097] ip6gre1: entered allmulticast mode [ 908.723443][T30106] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6570'. [ 908.769897][T30106] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6570'. [ 908.921224][T30114] netlink: 'syz.2.6574': attribute type 5 has an invalid length. [ 908.968253][T30117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6576'. [ 908.977473][T30117] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6576'. [ 908.992407][T30118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6575'. [ 909.164027][T30125] netlink: 'syz.0.6577': attribute type 27 has an invalid length. [ 909.236036][T30106] IPVS: length: 141 != 8 [ 909.296868][T30125] team0: left promiscuous mode [ 909.305560][T30125] team_slave_0: left promiscuous mode [ 909.311396][T30125] team_slave_1: left promiscuous mode [ 909.421223][T30125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 909.438668][T30125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 909.679127][T30130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.688840][T30130] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.726137][T30130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 909.775375][T22280] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.793424][T22280] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.834941][T22280] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.858783][T22280] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.892260][T30144] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 909.955604][T30151] syzkaller0: entered promiscuous mode [ 909.978582][T30151] syzkaller0: entered allmulticast mode [ 910.216860][T30154] wg1 speed is unknown, defaulting to 1000 [ 910.224658][T30154] wg1 speed is unknown, defaulting to 1000 [ 910.233387][T30154] vxcan1 speed is unknown, defaulting to 1000 [ 910.550800][T30154] lo speed is unknown, defaulting to 1000 [ 910.763999][T30183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6589'. [ 910.766031][T30186] netlink: 'syz.3.6590': attribute type 11 has an invalid length. [ 911.006763][T30161] wg1 speed is unknown, defaulting to 1000 [ 911.018745][T30161] wg1 speed is unknown, defaulting to 1000 [ 911.085738][T30161] vxcan1 speed is unknown, defaulting to 1000 [ 911.205463][T30190] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6592'. [ 911.808243][T30215] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6598'. [ 911.831238][T30161] lo speed is unknown, defaulting to 1000 [ 912.034649][T30224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6602'. [ 912.387784][T30230] "syz.1.6604" (30230) uses obsolete ecb(arc4) skcipher [ 913.266224][T30209] wg1 speed is unknown, defaulting to 1000 [ 913.322272][T30209] wg1 speed is unknown, defaulting to 1000 [ 913.322596][T30210] wg1 speed is unknown, defaulting to 1000 [ 913.379259][T30209] vxcan1 speed is unknown, defaulting to 1000 [ 913.384964][T30210] wg1 speed is unknown, defaulting to 1000 [ 913.651677][T30270] __nla_validate_parse: 1 callbacks suppressed [ 913.652859][T30270] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6614'. [ 913.693658][T30270] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6614'. [ 913.862731][T30209] lo speed is unknown, defaulting to 1000 [ 913.862737][T30210] vxcan1 speed is unknown, defaulting to 1000 [ 913.901186][T30270] IPVS: length: 141 != 8 [ 914.010289][T30286] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6617'. [ 914.484018][T30298] 8021q: VLANs not supported on lo [ 914.550133][T30299] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 914.599863][T30290] wg1 speed is unknown, defaulting to 1000 [ 914.615211][T30210] lo speed is unknown, defaulting to 1000 [ 914.684795][T30290] wg1 speed is unknown, defaulting to 1000 [ 914.734622][T30290] vxcan1 speed is unknown, defaulting to 1000 [ 915.180621][T30310] lec:lec_start_xmit: lec0:No lecd attached [ 915.218476][T30310] syzkaller0: entered promiscuous mode [ 915.224007][T30310] syzkaller0: entered allmulticast mode [ 915.490694][T30314] netlink: 'syz.1.6626': attribute type 11 has an invalid length. [ 915.765250][T30290] lo speed is unknown, defaulting to 1000 [ 915.767039][T30312] wg1 speed is unknown, defaulting to 1000 [ 915.804077][T30312] wg1 speed is unknown, defaulting to 1000 [ 915.833249][T30312] vxcan1 speed is unknown, defaulting to 1000 [ 915.915151][T30321] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6628'. [ 915.935339][T30321] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6628'. [ 916.242307][T30321] IPVS: length: 141 != 8 [ 916.371356][T30312] lo speed is unknown, defaulting to 1000 [ 917.264343][T30338] netlink: 'syz.3.6633': attribute type 23 has an invalid length. [ 917.308062][T30338] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6633'. [ 917.366502][T30327] wg1 speed is unknown, defaulting to 1000 [ 917.375661][T30327] wg1 speed is unknown, defaulting to 1000 [ 917.406592][T30327] vxcan1 speed is unknown, defaulting to 1000 [ 917.503353][T30344] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.6636'. [ 917.765026][T30354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6639'. [ 917.777291][T30349] bond2: invalid ARP target 0.0.0.0 specified for addition [ 917.784678][T30349] bond2: option arp_ip_target: invalid value (0) [ 917.796803][T30349] bond2 (unregistering): Released all slaves [ 918.003249][T30358] gretap1: entered promiscuous mode [ 918.010764][T30327] lo speed is unknown, defaulting to 1000 [ 918.090236][T30360] tipc: Enabling of bearer rejected, failed to enable media [ 918.107812][T30360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6642'. [ 918.123464][T30360] netlink: 23 bytes leftover after parsing attributes in process `syz.3.6642'. [ 919.282473][T30393] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6652'. [ 919.313649][T30393] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6652'. [ 919.343429][T30397] tipc: Resetting bearer [ 919.712953][T30390] wg1 speed is unknown, defaulting to 1000 [ 919.747664][T30390] wg1 speed is unknown, defaulting to 1000 [ 919.768485][T30390] vxcan1 speed is unknown, defaulting to 1000 [ 920.034320][T30390] lo speed is unknown, defaulting to 1000 [ 920.768357][T30442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6666'. [ 920.914361][T30445] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6667'. [ 920.937059][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 920.945172][ C0] lec:lec_tx_timeout: lec0 [ 920.950445][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 921.105021][T30438] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.337202][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.378797][T30438] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.503095][T30438] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.643997][T30457] netlink: 'syz.3.6670': attribute type 1 has an invalid length. [ 921.658966][T30438] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.669735][T30457] netlink: 'syz.3.6670': attribute type 3 has an invalid length. [ 921.683307][T30457] netlink: 'syz.3.6670': attribute type 7 has an invalid length. [ 921.683613][T30461] netlink: 'syz.1.6671': attribute type 29 has an invalid length. [ 921.700075][T30457] netlink: 'syz.3.6670': attribute type 8 has an invalid length. [ 921.708438][T30457] netlink: 184 bytes leftover after parsing attributes in process `syz.3.6670'. [ 921.719424][T30457] NCSI netlink: No device for ifindex 131092 [ 921.854622][T22276] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.972787][ T8529] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.030746][ T8529] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.065115][ T8529] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.084617][T30462] wg1 speed is unknown, defaulting to 1000 [ 922.092363][T30462] wg1 speed is unknown, defaulting to 1000 [ 922.100237][T30462] vxcan1 speed is unknown, defaulting to 1000 [ 922.191644][T30476] netlink: 'syz.3.6674': attribute type 13 has an invalid length. [ 922.207980][T30476] netlink: 'syz.3.6674': attribute type 17 has an invalid length. [ 922.263788][T30475] can: request_module (can-proto-5) failed. [ 922.338545][T30476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 922.542605][T30462] lo speed is unknown, defaulting to 1000 [ 922.843279][T30503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6683'. [ 923.223750][T30521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6688'. [ 923.418130][T29974] Bluetooth: hci1: command 0x0406 tx timeout [ 923.625133][T30533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6692'. [ 923.663360][T30533] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6692'. [ 923.677643][T30533] netlink: 540 bytes leftover after parsing attributes in process `syz.4.6692'. [ 923.699163][T30509] wg1 speed is unknown, defaulting to 1000 [ 923.718757][T30509] wg1 speed is unknown, defaulting to 1000 [ 923.732426][T30509] vxcan1 speed is unknown, defaulting to 1000 [ 923.992216][T30540] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 924.065995][T30540] bond1 (unregistering): Released all slaves [ 924.085187][T30509] lo speed is unknown, defaulting to 1000 [ 924.087422][T30550] syz_tun: entered allmulticast mode [ 924.109481][T30550] dvmrp8: entered allmulticast mode [ 924.200530][T30549] syz_tun: left allmulticast mode [ 924.294091][T30553] netlink: 'syz.2.6699': attribute type 9 has an invalid length. [ 924.578645][T30560] syzkaller1: entered promiscuous mode [ 924.584170][T30560] syzkaller1: entered allmulticast mode [ 924.916094][T30571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6703'. [ 924.952126][T30571] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6703'. [ 925.179059][T30566] wg1 speed is unknown, defaulting to 1000 [ 925.195087][T30566] wg1 speed is unknown, defaulting to 1000 [ 925.225003][T30566] vxcan1 speed is unknown, defaulting to 1000 [ 925.288542][T30589] team0: No ports can be present during mode change [ 925.357358][T30592] syz_tun: entered allmulticast mode [ 925.419452][T30592] dvmrp8: entered allmulticast mode [ 925.483690][T30591] syz_tun: left allmulticast mode [ 925.496292][T30601] ip6t_REJECT: ECHOREPLY is not supported [ 925.510939][T30601] ip6t_REJECT: ECHOREPLY is not supported [ 925.537280][T30601] ip6t_REJECT: ECHOREPLY is not supported [ 925.543180][T30601] ip6t_REJECT: ECHOREPLY is not supported [ 925.586749][T30566] lo speed is unknown, defaulting to 1000 [ 925.593115][T30601] ip6t_REJECT: ECHOREPLY is not supported [ 925.603566][T30601] ip6t_REJECT: ECHOREPLY is not supported [ 925.619299][T30601] ip6t_REJECT: ECHOREPLY is not supported [ 925.625205][T30601] ip6t_REJECT: ECHOREPLY is not supported [ 925.653742][T30601] ip6t_REJECT: ECHOREPLY is not supported [ 925.957003][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 925.965084][ C0] lec:lec_tx_timeout: lec0 [ 925.970129][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 925.989087][T30621] tipc: Enabled bearer , priority 0 [ 926.017592][T30619] tipc: Enabling of bearer rejected, already enabled [ 926.034868][T30621] syzkaller0: entered promiscuous mode [ 926.058095][T30621] syzkaller0: entered allmulticast mode [ 926.080178][ T9] IPVS: starting estimator thread 0... [ 926.089675][T30624] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6718'. [ 926.100316][T30624] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6718'. [ 926.190297][T30625] IPVS: using max 27 ests per chain, 64800 per kthread [ 926.290314][T30627] tipc: Resetting bearer [ 926.402562][T30627] tipc: Disabling bearer [ 926.490331][T30624] IPVS: length: 141 != 8 [ 927.173908][T30661] wg1 speed is unknown, defaulting to 1000 [ 927.181841][T30661] wg1 speed is unknown, defaulting to 1000 [ 927.188841][T30661] vxcan1 speed is unknown, defaulting to 1000 [ 927.329225][T30661] lo speed is unknown, defaulting to 1000 [ 927.488894][T30672] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4. [ 927.528337][T30672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6728'. [ 927.765708][T30684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6732'. [ 927.806910][T30684] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6732'. [ 927.839490][T30684] netlink: 540 bytes leftover after parsing attributes in process `syz.2.6732'. [ 928.095225][T30697] netlink: 'syz.2.6736': attribute type 3 has an invalid length. [ 928.462142][T30704] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6738'. [ 928.841439][T30709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6740'. [ 928.958565][T30695] wg1 speed is unknown, defaulting to 1000 [ 928.966116][T30695] wg1 speed is unknown, defaulting to 1000 [ 928.995552][T30695] vxcan1 speed is unknown, defaulting to 1000 [ 929.376531][T30695] lo speed is unknown, defaulting to 1000 [ 929.951936][T30749] __nla_validate_parse: 2 callbacks suppressed [ 929.951956][T30749] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6754'. [ 930.155089][T30755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6753'. [ 930.351565][T30749] IPVS: length: 141 != 8 [ 930.521399][T30768] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6760'. [ 930.608281][T30773] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6762'. [ 930.720969][T30775] veth3: entered promiscuous mode [ 930.724600][T30774] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6762'. [ 930.790265][T30774] nbd: device at index 64 is going down [ 930.886561][T30405] udevd[30405]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 930.977040][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 930.985133][ C0] lec:lec_tx_timeout: lec0 [ 930.990852][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 931.143575][T30807] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 0, id = 0 [ 931.326332][T30814] syz_tun: entered allmulticast mode [ 931.368070][T30810] syz_tun: left allmulticast mode [ 931.477368][T30822] syzkaller1: entered promiscuous mode [ 931.512238][T30822] syzkaller1: entered allmulticast mode [ 931.521121][T30820] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 931.713432][T30837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6777'. [ 931.741065][T30837] netlink: 'syz.3.6777': attribute type 1 has an invalid length. [ 931.777734][T30837] bond2: entered promiscuous mode [ 931.783297][T30837] 8021q: adding VLAN 0 to HW filter on device bond2 [ 931.851204][T30837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6777'. [ 931.866748][T30848] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6781'. [ 931.890971][T30851] netlink: 'syz.2.6782': attribute type 1 has an invalid length. [ 931.910820][T30837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6777'. [ 932.023907][T30854] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 932.058722][T30854] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 932.069555][T30851] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6782'. [ 932.224632][T30867] bond2: (slave bridge4): Enslaving as an active interface with a down link [ 932.255883][T30854] macvlan2: entered promiscuous mode [ 932.282443][T30854] macvlan2: entered allmulticast mode [ 932.289866][T30854] bond2: entered promiscuous mode [ 932.295942][T30854] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 932.308321][T30854] bond2: left promiscuous mode [ 932.450833][T30876] veth7: entered promiscuous mode [ 933.115657][T30912] netlink: 'syz.3.6804': attribute type 1 has an invalid length. [ 933.189162][T30912] NCSI netlink: No device for ifindex 0 [ 933.224293][T30915] netlink: 'syz.4.6802': attribute type 11 has an invalid length. [ 933.451916][T30926] netlink: 'syz.1.6806': attribute type 2 has an invalid length. [ 933.461870][T30926] openvswitch: netlink: Flow key attribute not present in set flow. [ 933.595137][T30928] veth0_to_bridge: entered promiscuous mode [ 934.224737][T30923] veth0_to_bridge: left promiscuous mode [ 934.423368][T30959] netlink: 'syz.4.6817': attribute type 11 has an invalid length. [ 934.510005][T30960] bond4: option ad_select: invalid value (34) [ 934.528818][T30960] bond4 (unregistering): Released all slaves [ 934.710908][T22281] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 935.410544][T30988] netlink: 'syz.1.6825': attribute type 3 has an invalid length. [ 935.437459][T30988] __nla_validate_parse: 12 callbacks suppressed [ 935.437479][T30988] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6825'. [ 935.729093][T31004] vlan0: entered promiscuous mode [ 935.888384][T31009] netlink: 'syz.4.6830': attribute type 11 has an invalid length. [ 935.936124][ T52] Bluetooth: hci2: link tx timeout [ 935.941836][ T52] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 936.007017][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 936.015087][ C0] lec:lec_tx_timeout: lec0 [ 936.019891][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 936.239447][T30998] wg1 speed is unknown, defaulting to 1000 [ 936.290611][T30998] wg1 speed is unknown, defaulting to 1000 [ 936.371744][T30998] vxcan1 speed is unknown, defaulting to 1000 [ 936.376216][T31027] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6835'. [ 936.601920][T31030] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6836'. [ 936.699163][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 936.763978][T31027] IPVS: length: 141 != 8 [ 936.858239][T31034] bridge_slave_0: left allmulticast mode [ 936.867230][T31034] bridge_slave_0: left promiscuous mode [ 936.873060][T31034] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.955474][T31034] bridge_slave_1: left allmulticast mode [ 936.990521][T31034] bridge_slave_1: left promiscuous mode [ 937.030346][T31021] netlink: 'syz.0.6832': attribute type 6 has an invalid length. [ 937.060348][T31034] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.126148][T31034] bond0: (slave bond_slave_0): Releasing backup interface [ 937.161932][T31034] bond0: (slave bond_slave_1): Releasing backup interface [ 937.193044][T31034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 937.200678][T31034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 937.221049][T31034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 937.228892][T31034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 937.238747][T31034] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 937.275719][T31041] ip6tnl1: entered promiscuous mode [ 937.297262][T31042] netlink: 'syz.2.6838': attribute type 12 has an invalid length. [ 937.410518][T30999] wg1 speed is unknown, defaulting to 1000 [ 937.450545][T30999] wg1 speed is unknown, defaulting to 1000 [ 937.525845][T30998] lo speed is unknown, defaulting to 1000 [ 937.525865][T30999] vxcan1 speed is unknown, defaulting to 1000 [ 937.604533][T31044] netlink: 'syz.4.6839': attribute type 3 has an invalid length. [ 937.870697][T31053] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6842'. [ 937.988492][T29974] Bluetooth: hci2: command 0x0401 tx timeout [ 938.207655][T31011] wg1 speed is unknown, defaulting to 1000 [ 938.228980][T31011] wg1 speed is unknown, defaulting to 1000 [ 938.359615][T31011] vxcan1 speed is unknown, defaulting to 1000 [ 938.653715][T31057] netlink: 'syz.3.6843': attribute type 11 has an invalid length. [ 938.736220][T31011] lo speed is unknown, defaulting to 1000 [ 938.813062][T30999] lo speed is unknown, defaulting to 1000 [ 939.003627][T31068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6846'. [ 939.086332][T31068] netlink: 'syz.4.6846': attribute type 8 has an invalid length. [ 939.896413][T31077] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6848'. [ 940.328335][T31089] IPVS: length: 141 != 8 [ 940.820205][T31093] macsec1: entered allmulticast mode [ 940.844037][T31096] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6854'. [ 940.855516][T31093] macsec0: entered allmulticast mode [ 940.884500][T31093] veth1_macvtap: entered allmulticast mode [ 940.899213][T31095] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6854'. [ 941.027061][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 941.035097][ C0] lec:lec_tx_timeout: lec0 [ 941.039756][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 941.398882][T31117] siw: device registration error -23 [ 941.448193][T31117] xt_TCPMSS: Only works on TCP SYN packets [ 941.785202][T31136] netlink: 'syz.0.6863': attribute type 6 has an invalid length. [ 941.795747][T31138] netlink: 348 bytes leftover after parsing attributes in process `syz.4.6865'. [ 941.806010][T31136] netlink: 'syz.0.6863': attribute type 6 has an invalid length. [ 941.987988][T31139] erspan0: entered promiscuous mode [ 942.028664][T31139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6865'. [ 942.735907][T31181] netlink: 'syz.0.6876': attribute type 1 has an invalid length. [ 942.809809][T31181] bond2: entered promiscuous mode [ 942.815457][T31181] 8021q: adding VLAN 0 to HW filter on device bond2 [ 942.868726][T31181] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6876'. [ 943.266072][T31204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6882'. [ 943.294024][T31204] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6882'. [ 943.314284][T31204] netlink: 'syz.1.6882': attribute type 58 has an invalid length. [ 943.324575][T31204] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6882'. [ 943.817249][ T52] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 943.822322][T29974] Bluetooth: hci2: command 0x0401 tx timeout [ 944.887541][T31181] bond2: entered allmulticast mode [ 944.911481][T31201] bond2: (slave bridge2): making interface the new active one [ 944.919140][T31201] bridge2: entered promiscuous mode [ 944.924473][T31201] bridge2: entered allmulticast mode [ 944.931946][T31201] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 945.049224][T31210] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.6883'. [ 945.068335][T31210] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 946.047065][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 946.055142][ C0] lec:lec_tx_timeout: lec0 [ 946.059980][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 946.942726][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 947.366202][T31227] syzkaller0: entered promiscuous mode [ 947.377374][T31227] syzkaller0: entered allmulticast mode [ 947.477801][T31253] netlink: 596 bytes leftover after parsing attributes in process `syz.0.6889'. [ 949.674111][T31245] netlink: 'syz.0.6889': attribute type 29 has an invalid length. [ 949.682664][T31205] wg1 speed is unknown, defaulting to 1000 [ 949.703687][T31205] wg1 speed is unknown, defaulting to 1000 [ 949.711602][T31205] vxcan1 speed is unknown, defaulting to 1000 [ 949.802661][T31287] netlink: 'syz.0.6895': attribute type 1 has an invalid length. [ 949.911870][T31292] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6896'. [ 950.096755][T31298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6899'. [ 950.143149][T31205] lo speed is unknown, defaulting to 1000 [ 950.194167][T31298] netlink: 'syz.1.6899': attribute type 11 has an invalid length. [ 950.370617][T31282] wg1 speed is unknown, defaulting to 1000 [ 950.394192][T31282] wg1 speed is unknown, defaulting to 1000 [ 950.429906][T31282] vxcan1 speed is unknown, defaulting to 1000 [ 950.869397][T31282] lo speed is unknown, defaulting to 1000 [ 950.890154][T31319] wg1 speed is unknown, defaulting to 1000 [ 951.046573][T31319] wg1 speed is unknown, defaulting to 1000 [ 951.067049][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 951.075195][ C0] lec:lec_tx_timeout: lec0 [ 951.079846][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 951.093568][T31319] vxcan1 speed is unknown, defaulting to 1000 [ 951.449989][T31319] lo speed is unknown, defaulting to 1000 [ 952.280656][T31347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6911'. [ 952.290749][T31347] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6911'. [ 952.306262][T31347] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6911'. [ 952.520673][T31357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6912'. [ 952.616919][T31362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6912'. [ 952.651610][T31363] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 952.736611][T31362] hsr_slave_0: left promiscuous mode [ 952.754445][T31362] hsr_slave_1: left promiscuous mode [ 952.869957][T31373] syzkaller1: entered promiscuous mode [ 952.875916][T31373] syzkaller1: entered allmulticast mode [ 952.924683][T31376] veth3: entered promiscuous mode [ 952.954563][T31376] veth5: entered promiscuous mode [ 953.041553][T31383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6918'. [ 953.063720][T31383] veth1_macvtap: left allmulticast mode [ 953.070766][T31383] veth1_macvtap: left promiscuous mode [ 953.114238][T31386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6918'. [ 953.135256][T31383] macsec0 (unregistering): left allmulticast mode [ 953.200806][T31386] hsr_slave_0: left promiscuous mode [ 953.209103][T31386] hsr_slave_1: left promiscuous mode [ 953.266552][T31389] lo: Caught tx_queue_len zero misconfig [ 953.385961][T31396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6923'. [ 953.396633][T31396] netlink: 'syz.2.6923': attribute type 14 has an invalid length. [ 953.406555][T31396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6923'. [ 953.423537][T31396] netlink: 'syz.2.6923': attribute type 14 has an invalid length. [ 953.605524][T31410] netlink: 'syz.4.6927': attribute type 3 has an invalid length. [ 953.609061][T31411] netlink: 'syz.4.6927': attribute type 33 has an invalid length. [ 953.621498][T31411] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6927'. [ 953.685869][T31413] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6928'. [ 953.698140][T31413] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6928'. [ 954.193631][T31435] syzkaller1: entered promiscuous mode [ 954.207083][T31435] syzkaller1: entered allmulticast mode [ 954.319315][T31421] wg1 speed is unknown, defaulting to 1000 [ 954.327236][T31421] wg1 speed is unknown, defaulting to 1000 [ 954.334955][T31421] vxcan1 speed is unknown, defaulting to 1000 [ 954.697860][T31421] lo speed is unknown, defaulting to 1000 [ 954.961082][T31459] netlink: 'syz.4.6943': attribute type 11 has an invalid length. [ 954.995363][T31459] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6943'. [ 955.208616][T31465] openvswitch: netlink: Actions may not be safe on all matching packets [ 956.087113][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 956.095169][ C0] lec:lec_tx_timeout: lec0 [ 956.099981][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 956.248959][T31509] netlink: 'syz.3.6955': attribute type 54 has an invalid length. [ 956.279173][T31508] batadv0: entered promiscuous mode [ 956.284559][T31508] macvtap1: entered promiscuous mode [ 956.305781][T31508] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 956.521477][T31512] erspan0: entered promiscuous mode [ 956.715382][T31537] netlink: 'syz.3.6965': attribute type 11 has an invalid length. [ 957.023307][T31555] IPv6: Can't replace route, no match found [ 957.417709][ T52] Bluetooth: hci2: command 0x0401 tx timeout [ 957.453343][T31566] bond5: entered allmulticast mode [ 957.459182][T31566] 8021q: adding VLAN 0 to HW filter on device bond5 [ 957.651067][T31586] netlink: 'syz.4.6981': attribute type 11 has an invalid length. [ 957.675027][T31586] netlink: 'syz.4.6981': attribute type 11 has an invalid length. [ 957.686387][T31586] __nla_validate_parse: 8 callbacks suppressed [ 957.686406][T31586] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6981'. [ 957.865613][T31604] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6985'. [ 957.876730][T31605] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6985'. [ 957.950308][T31605] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6985'. [ 958.056758][T31609] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6984'. [ 958.072583][T31609] tipc: Started in network mode [ 958.078135][T31609] tipc: Node identity 5e618c141e1a, cluster identity 4711 [ 958.085806][T31609] tipc: Enabled bearer , priority 0 [ 958.098240][T31598] syzkaller0: entered promiscuous mode [ 958.103956][T31598] syzkaller0: entered allmulticast mode [ 958.144466][T31598] tipc: Resetting bearer [ 958.150823][T31596] wg1 speed is unknown, defaulting to 1000 [ 958.165725][T31596] wg1 speed is unknown, defaulting to 1000 [ 958.193808][T31612] tipc: Enabled bearer , priority 0 [ 958.201718][T31612] syzkaller0: entered promiscuous mode [ 958.207260][T31612] syzkaller0: entered allmulticast mode [ 958.226599][T31596] vxcan1 speed is unknown, defaulting to 1000 [ 958.259659][T31611] tipc: Resetting bearer [ 958.295469][T31611] tipc: Disabling bearer [ 958.435520][T31597] tipc: Resetting bearer [ 958.527656][T31597] tipc: Disabling bearer [ 958.547473][T31596] lo speed is unknown, defaulting to 1000 [ 958.583817][T31622] netlink: 'syz.2.6990': attribute type 29 has an invalid length. [ 958.587269][T31621] netlink: 'syz.0.6989': attribute type 10 has an invalid length. [ 958.673837][T31621] 8021q: adding VLAN 0 to HW filter on device team0 [ 958.701402][T31621] bond0: (slave team0): Enslaving as an active interface with an up link [ 958.929861][T31640] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 959.021262][T31643] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.116861][T31643] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.245556][T31643] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.276380][T31656] netlink: 'syz.1.6998': attribute type 15 has an invalid length. [ 959.322845][T31659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6999'. [ 959.356121][T31643] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.487342][T31665] siw: device registration error -23 [ 959.693572][T31672] sctp: [Deprecated]: syz.1.7000 (pid 31672) Use of int in maxseg socket option. [ 959.693572][T31672] Use struct sctp_assoc_value instead [ 959.735923][T22279] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.779137][T22279] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.813151][T22279] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.843532][T22275] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.988798][T31681] netlink: 'syz.2.7004': attribute type 11 has an invalid length. [ 960.041731][T31684] netlink: 'syz.0.7006': attribute type 10 has an invalid length. [ 960.189690][T31661] wg1 speed is unknown, defaulting to 1000 [ 960.222907][T31661] wg1 speed is unknown, defaulting to 1000 [ 960.258999][T31661] vxcan1 speed is unknown, defaulting to 1000 [ 960.802399][T31702] bond3: (slave tunl0): Device is not bonding slave [ 960.809372][T31702] bond3: option active_slave: invalid value (tunl0) [ 960.982004][T31702] bond3 (unregistering): Released all slaves [ 961.101476][T31706] syzkaller1: entered promiscuous mode [ 961.107096][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 961.107127][ C0] lec:lec_tx_timeout: lec0 [ 961.115424][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 961.150526][T31706] syzkaller1: entered allmulticast mode [ 961.350113][T31719] netlink: 'syz.0.7017': attribute type 1 has an invalid length. [ 961.482712][T31719] bond3: entered promiscuous mode [ 961.488471][T31719] 8021q: adding VLAN 0 to HW filter on device bond3 [ 961.516597][T31724] 8021q: adding VLAN 0 to HW filter on device bond3 [ 961.524165][T31724] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 961.539478][T31724] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 961.570789][T31724] bond3: (slave wireguard0): making interface the new active one [ 961.588077][T31724] wireguard0: entered promiscuous mode [ 961.595737][T31724] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 961.611399][T31661] lo speed is unknown, defaulting to 1000 [ 961.669846][T31662] wg1 speed is unknown, defaulting to 1000 [ 961.699624][T31662] wg1 speed is unknown, defaulting to 1000 [ 961.721557][T31662] vxcan1 speed is unknown, defaulting to 1000 [ 962.047878][T31744] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7024'. [ 962.058917][T31744] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7024'. [ 962.221562][ T5930] IPVS: starting estimator thread 0... [ 962.231507][T31746] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7025'. [ 962.258047][T31746] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7025'. [ 962.314414][T31662] lo speed is unknown, defaulting to 1000 [ 962.332123][T31731] wg1 speed is unknown, defaulting to 1000 [ 962.339175][T31747] IPVS: using max 33 ests per chain, 79200 per kthread [ 962.444081][T31731] wg1 speed is unknown, defaulting to 1000 [ 962.509291][T31750] IPVS: length: 141 != 8 [ 962.529332][T31731] vxcan1 speed is unknown, defaulting to 1000 [ 962.643205][T31753] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20002 [ 962.677859][T31746] IPVS: length: 141 != 8 [ 962.723658][T31753] bond0: (slave rose0): Releasing backup interface [ 962.747927][T31753] rose0: left promiscuous mode [ 962.752914][T31753] rose0: left allmulticast mode [ 962.898123][T31760] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7029'. [ 963.026225][T31764] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7031'. [ 963.046177][T31764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7031'. [ 963.121927][T31731] lo speed is unknown, defaulting to 1000 [ 963.583172][T31764] wg1 speed is unknown, defaulting to 1000 [ 963.684156][T31764] wg1 speed is unknown, defaulting to 1000 [ 963.874914][T31764] vxcan1 speed is unknown, defaulting to 1000 [ 963.917167][T31774] SET target dimension over the limit! [ 963.933166][T31773] SET target dimension over the limit! [ 964.085021][T31776] netlink: 'syz.2.7034': attribute type 1 has an invalid length. [ 964.103164][T31776] netlink: 'syz.2.7034': attribute type 1 has an invalid length. [ 964.265023][T31783] syzkaller0: entered allmulticast mode [ 964.347510][T31764] lo speed is unknown, defaulting to 1000 [ 965.575916][T31818] netlink: 260 bytes leftover after parsing attributes in process `syz.0.7047'. [ 965.626339][T31818] netlink: 'syz.0.7047': attribute type 1 has an invalid length. [ 965.821021][T31802] wg1 speed is unknown, defaulting to 1000 [ 965.839714][T31802] wg1 speed is unknown, defaulting to 1000 [ 965.852989][T31802] vxcan1 speed is unknown, defaulting to 1000 [ 965.933344][T31826] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7050'. [ 966.132906][T31835] netlink: zone id is out of range [ 966.139025][T31835] netlink: zone id is out of range [ 966.144165][T31835] netlink: zone id is out of range [ 966.149589][T31835] netlink: zone id is out of range [ 966.154711][T31835] netlink: zone id is out of range [ 966.160116][T31835] netlink: zone id is out of range [ 966.165245][T31835] netlink: zone id is out of range [ 966.171748][T31835] netlink: zone id is out of range [ 966.176883][T31835] netlink: zone id is out of range [ 966.185638][T31835] netlink: zone id is out of range [ 966.396380][T31840] netlink: 'syz.1.7057': attribute type 10 has an invalid length. [ 966.414984][T31802] lo speed is unknown, defaulting to 1000 [ 966.459324][T31840] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 967.319052][T31875] netlink: 'syz.0.7068': attribute type 3 has an invalid length. [ 967.361483][T31877] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7069'. [ 967.416985][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6310 ms [ 967.425084][ C0] lec:lec_tx_timeout: lec0 [ 967.430044][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 967.678249][T31896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7076'. [ 968.155699][T31931] tipc: Enabling of bearer rejected, failed to enable media [ 968.169678][T31933] sctp: [Deprecated]: syz.4.7085 (pid 31933) Use of int in max_burst socket option. [ 968.169678][T31933] Use struct sctp_assoc_value instead [ 968.199986][T31933] gretap0: entered promiscuous mode [ 968.210363][T31933] gretap0: left promiscuous mode [ 968.371198][T31940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7088'. [ 968.406117][T31940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 968.422837][T31940] team0: Device batadv0 is up. Set it down before adding it as a team port [ 968.762509][T31973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7096'. [ 968.797794][T31972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7096'. [ 969.021213][T31993] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7104'. [ 969.256682][T32000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7106'. [ 969.278431][T32000] netlink: 620 bytes leftover after parsing attributes in process `syz.2.7106'. [ 969.289364][T32000] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7106'. [ 969.302618][T32000] sctp: [Deprecated]: syz.2.7106 (pid 32000) Use of int in maxseg socket option. [ 969.302618][T32000] Use struct sctp_assoc_value instead [ 969.470123][T32018] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7111'. [ 969.675796][T32032] netlink: 'syz.4.7113': attribute type 12 has an invalid length. [ 969.685062][T32032] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7113'. [ 970.371519][T32072] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7124'. [ 970.398861][ T5930] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 970.825687][T32088] IPVS: length: 141 != 8 [ 970.937884][ T5930] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 971.101105][T32079] wg1 speed is unknown, defaulting to 1000 [ 971.128874][T32079] wg1 speed is unknown, defaulting to 1000 [ 971.136405][T32079] vxcan1 speed is unknown, defaulting to 1000 [ 971.549701][T32111] net_ratelimit: 2 callbacks suppressed [ 971.549719][T32111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 971.816370][T32079] lo speed is unknown, defaulting to 1000 [ 973.176983][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 973.185115][ C0] lec:lec_tx_timeout: lec0 [ 973.190222][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 974.039081][T32161] netlink: 'syz.3.7151': attribute type 1 has an invalid length. [ 974.385853][T32177] sit1: entered promiscuous mode [ 974.758872][T32189] FAULT_INJECTION: forcing a failure. [ 974.758872][T32189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 974.772757][T32189] CPU: 0 UID: 0 PID: 32189 Comm: syz.2.7158 Not tainted syzkaller #0 PREEMPT(full) [ 974.772809][T32189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 974.772822][T32189] Call Trace: [ 974.772831][T32189] [ 974.772840][T32189] dump_stack_lvl+0x189/0x250 [ 974.772874][T32189] ? __pfx____ratelimit+0x10/0x10 [ 974.772897][T32189] ? __pfx_dump_stack_lvl+0x10/0x10 [ 974.772928][T32189] ? __pfx__printk+0x10/0x10 [ 974.772945][T32189] ? __might_fault+0xb0/0x130 [ 974.772984][T32189] should_fail_ex+0x414/0x560 [ 974.773019][T32189] _copy_from_user+0x2d/0xb0 [ 974.773049][T32189] __sys_bpf+0x1e3/0x860 [ 974.773068][T32189] ? __pfx___sys_bpf+0x10/0x10 [ 974.773105][T32189] ? ksys_write+0x22a/0x250 [ 974.773134][T32189] ? __pfx_ksys_write+0x10/0x10 [ 974.773164][T32189] __x64_sys_bpf+0x7c/0x90 [ 974.773197][T32189] do_syscall_64+0xfa/0xfa0 [ 974.773216][T32189] ? lockdep_hardirqs_on+0x9c/0x150 [ 974.773238][T32189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.773255][T32189] ? clear_bhb_loop+0x60/0xb0 [ 974.773277][T32189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.773295][T32189] RIP: 0033:0x7f9e7258f749 [ 974.773313][T32189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 974.773331][T32189] RSP: 002b:00007f9e734c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 974.773352][T32189] RAX: ffffffffffffffda RBX: 00007f9e727e5fa0 RCX: 00007f9e7258f749 [ 974.773366][T32189] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 000000000000000d [ 974.773379][T32189] RBP: 00007f9e734c7090 R08: 0000000000000000 R09: 0000000000000000 [ 974.773391][T32189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 974.773403][T32189] R13: 00007f9e727e6038 R14: 00007f9e727e5fa0 R15: 00007ffd985c80a8 [ 974.773436][T32189] [ 974.964650][T32192] netlink: 'syz.0.7157': attribute type 8 has an invalid length. [ 974.973505][T32192] __nla_validate_parse: 4 callbacks suppressed [ 974.973524][T32192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7157'. [ 975.239475][T32192] bond0: entered promiscuous mode [ 975.244558][T32192] bond_slave_0: entered promiscuous mode [ 975.303445][T32192] bond_slave_1: entered promiscuous mode [ 975.309379][T32184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7157'. [ 975.319217][T32192] batadv0: entered promiscuous mode [ 975.324650][T32192] team0: entered promiscuous mode [ 975.347356][T32192] team_slave_0: entered promiscuous mode [ 975.355911][T32192] team_slave_1: entered promiscuous mode [ 975.379328][T32192] geneve0: entered promiscuous mode [ 975.396887][T32192] bond0: left promiscuous mode [ 975.401905][T32192] bond_slave_0: left promiscuous mode [ 975.407790][T32192] bond_slave_1: left promiscuous mode [ 975.417705][T32192] batadv0: left promiscuous mode [ 975.428013][T32192] team0: left promiscuous mode [ 975.447273][T32192] team_slave_0: left promiscuous mode [ 975.453072][T32192] team_slave_1: left promiscuous mode [ 975.471212][T32192] geneve0: left promiscuous mode [ 975.494156][T32197] syzkaller0: entered promiscuous mode [ 975.505338][T32197] syzkaller0: entered allmulticast mode [ 975.942470][T32190] wg1 speed is unknown, defaulting to 1000 [ 975.954315][T32190] wg1 speed is unknown, defaulting to 1000 [ 975.962219][T32190] vxcan1 speed is unknown, defaulting to 1000 [ 976.274431][T32190] lo speed is unknown, defaulting to 1000 [ 976.359969][T32073] Set syz1 is full, maxelem 65536 reached [ 976.496568][T32227] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7166'. [ 976.560325][T32227] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 976.605331][T32232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7168'. [ 977.912703][T32271] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7181'. [ 977.951361][T32278] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7182'. [ 977.962253][T32279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7179'. [ 977.990205][T32278] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7182'. [ 978.042128][T32279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7179'. [ 978.406444][T32297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7187'. [ 978.749083][T32311] netlink: 'syz.2.7190': attribute type 1 has an invalid length. [ 978.756860][T32311] netlink: 'syz.2.7190': attribute type 3 has an invalid length. [ 978.764732][T32311] NCSI netlink: No device for ifindex 813332851 [ 978.937012][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 978.945306][ C0] lec:lec_tx_timeout: lec0 [ 978.950394][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 978.963956][T32318] FAULT_INJECTION: forcing a failure. [ 978.963956][T32318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 978.977564][T32318] CPU: 0 UID: 0 PID: 32318 Comm: syz.1.7194 Not tainted syzkaller #0 PREEMPT(full) [ 978.977592][T32318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 978.977605][T32318] Call Trace: [ 978.977614][T32318] [ 978.977622][T32318] dump_stack_lvl+0x189/0x250 [ 978.977655][T32318] ? __pfx____ratelimit+0x10/0x10 [ 978.977679][T32318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 978.977705][T32318] ? __pfx__printk+0x10/0x10 [ 978.977726][T32318] ? __might_fault+0xb0/0x130 [ 978.977765][T32318] should_fail_ex+0x414/0x560 [ 978.977801][T32318] _copy_from_user+0x2d/0xb0 [ 978.977828][T32318] restore_altstack+0x9d/0x4b0 [ 978.977854][T32318] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 978.977880][T32318] ? __pfx_restore_altstack+0x10/0x10 [ 978.977912][T32318] ? _raw_spin_unlock_irq+0x23/0x50 [ 978.977933][T32318] ? lockdep_hardirqs_on+0x9c/0x150 [ 978.977959][T32318] __ia32_sys_rt_sigreturn+0x281/0x860 [ 978.977994][T32318] ? _raw_spin_unlock_irq+0x23/0x50 [ 978.978018][T32318] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 978.978046][T32318] ? _raw_spin_unlock_irq+0x2e/0x50 [ 978.978071][T32318] ? __lock_acquire+0xab9/0xd20 [ 978.978111][T32318] ? __task_pid_nr_ns+0x28/0x490 [ 978.978144][T32318] ? do_syscall_64+0xbe/0xfa0 [ 978.978171][T32318] do_syscall_64+0xfa/0xfa0 [ 978.978192][T32318] ? lockdep_hardirqs_on+0x9c/0x150 [ 978.978215][T32318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.978236][T32318] ? clear_bhb_loop+0x60/0xb0 [ 978.978259][T32318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.978279][T32318] RIP: 0033:0x7f4c3ad2b829 [ 978.978305][T32318] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 978.978322][T32318] RSP: 002b:00007f4c3bc48a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 978.978344][T32318] RAX: ffffffffffffffda RBX: 00007f4c3afe5fa0 RCX: 00007f4c3ad2b829 [ 978.978359][T32318] RDX: 00007f4c3bc48a80 RSI: 00007f4c3bc48bb0 RDI: 0000000000000021 [ 978.978373][T32318] RBP: 00007f4c3bc49090 R08: 0000000000000000 R09: 0000000000000000 [ 978.978385][T32318] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 978.978397][T32318] R13: 00007f4c3afe6038 R14: 00007f4c3afe5fa0 R15: 00007fffb5c7f8d8 [ 978.978431][T32318] [ 979.314051][T32322] veth0_to_bond: entered allmulticast mode [ 979.422888][T32329] netlink: 'syz.4.7197': attribute type 10 has an invalid length. [ 979.485806][T32329] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 980.042371][T32357] FAULT_INJECTION: forcing a failure. [ 980.042371][T32357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 980.098275][T32357] CPU: 1 UID: 0 PID: 32357 Comm: syz.4.7206 Not tainted syzkaller #0 PREEMPT(full) [ 980.098305][T32357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 980.098318][T32357] Call Trace: [ 980.098326][T32357] [ 980.098336][T32357] dump_stack_lvl+0x189/0x250 [ 980.098367][T32357] ? __pfx____ratelimit+0x10/0x10 [ 980.098390][T32357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 980.098417][T32357] ? __pfx__printk+0x10/0x10 [ 980.098438][T32357] ? __might_fault+0xb0/0x130 [ 980.098478][T32357] should_fail_ex+0x414/0x560 [ 980.098513][T32357] _copy_from_user+0x2d/0xb0 [ 980.098538][T32357] __ia32_sys_rt_sigreturn+0x314/0x860 [ 980.098578][T32357] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 980.098607][T32357] ? _raw_spin_unlock_irq+0x2e/0x50 [ 980.098658][T32357] ? __task_pid_nr_ns+0x28/0x490 [ 980.098691][T32357] ? do_syscall_64+0xbe/0xfa0 [ 980.098719][T32357] do_syscall_64+0xfa/0xfa0 [ 980.098741][T32357] ? lockdep_hardirqs_on+0x9c/0x150 [ 980.098764][T32357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.098784][T32357] ? clear_bhb_loop+0x60/0xb0 [ 980.098809][T32357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.098829][T32357] RIP: 0033:0x7f67b572b829 [ 980.098847][T32357] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 980.098866][T32357] RSP: 002b:00007f67b39f5a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 980.098887][T32357] RAX: ffffffffffffffda RBX: 00007f67b59e5fa0 RCX: 00007f67b572b829 [ 980.098903][T32357] RDX: 00007f67b39f5a80 RSI: 00007f67b39f5bb0 RDI: 0000000000000021 [ 980.098917][T32357] RBP: 00007f67b39f6090 R08: 0000000000000000 R09: 0000000000000000 [ 980.098930][T32357] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 980.098943][T32357] R13: 00007f67b59e6038 R14: 00007f67b59e5fa0 R15: 00007ffecbb6f6e8 [ 980.098977][T32357] [ 980.257864][T32355] wg1 speed is unknown, defaulting to 1000 [ 980.418831][T32355] wg1 speed is unknown, defaulting to 1000 [ 980.439340][T32355] vxcan1 speed is unknown, defaulting to 1000 [ 980.792363][T32364] __nla_validate_parse: 3 callbacks suppressed [ 980.792389][T32364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7209'. [ 980.958604][T32355] lo speed is unknown, defaulting to 1000 [ 981.181966][T32375] erspan0: left promiscuous mode [ 981.213053][T32381] netlink: 'syz.3.7214': attribute type 1 has an invalid length. [ 981.285728][T32383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7211'. [ 981.579655][T32375] gretap1: left promiscuous mode [ 981.613792][T32375] veth3: left promiscuous mode [ 981.632864][T32375] veth5: left promiscuous mode [ 981.663775][T32375] macvtap1: left promiscuous mode [ 981.710163][T32375] bond5: left allmulticast mode [ 981.734665][T32381] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 981.761127][T32383] hsr_slave_0: left promiscuous mode [ 981.797987][T32383] hsr_slave_1: left promiscuous mode [ 981.884202][T22275] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.902924][T22275] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.921803][T22275] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.028190][T32390] syzkaller0: entered promiscuous mode [ 982.054353][T32390] syzkaller0: entered allmulticast mode [ 982.087839][T22275] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.957034][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 983.965136][ C0] lec:lec_tx_timeout: lec0 [ 983.969718][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 984.497540][T32402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7216'. [ 984.572593][T32412] netlink: 'syz.1.7218': attribute type 11 has an invalid length. [ 984.635977][T32414] netlink: 'syz.0.7219': attribute type 2 has an invalid length. [ 984.645661][T32414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7219'. [ 984.721167][T22275] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 984.755309][T22275] bond6 (unregistering): (slave ip6gretap3): Releasing active interface [ 984.764960][T22275] bond6 (unregistering): (slave ip6gretap3): the permanent HWaddr of slave - 52:66:00:40:dd:a0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 984.784710][T22275] bond6 (unregistering): (slave erspan0): making interface the new active one [ 984.892519][T22275] bond6 (unregistering): (slave erspan0): Releasing active interface [ 984.942323][T22275] tipc: Disabling bearer [ 984.977625][T22275] dvmrp0 (unregistering): left allmulticast mode [ 985.006843][T22275] bond5 (unregistering): (slave geneve2): Releasing active interface [ 985.041097][T22275] geneve0 (unregistering): left promiscuous mode [ 985.159572][T22275] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 985.523313][T22275] bond0 (unregistering): left promiscuous mode [ 985.529604][T22275] dummy0: left promiscuous mode [ 985.535816][T22275] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 985.545815][T22275] bond0 (unregistering): Released all slaves [ 985.664310][T22275] bond1 (unregistering): Released all slaves [ 985.680090][T22275] bond2 (unregistering): Released all slaves [ 985.797382][T22275] bond3 (unregistering): Released all slaves [ 985.918307][T22275] bond4 (unregistering): Released all slaves [ 986.046853][T22275] bond5 (unregistering): Released all slaves [ 986.166762][T22275] bond6 (unregistering): (slave veth5): Releasing active interface [ 986.175713][T22275] bond6 (unregistering): Released all slaves [ 986.188565][T22275] bond7 (unregistering): Released all slaves [ 986.308660][T22275] bond8 (unregistering): Released all slaves [ 986.430117][T22275] bond9 (unregistering): (slave veth7): Releasing backup interface [ 986.439379][T22275] bond9 (unregistering): Released all slaves [ 986.562863][T22275] bond10 (unregistering): Released all slaves [ 986.575543][T22275] bond11 (unregistering): Released all slaves [ 986.588131][T22275] bond12 (unregistering): Released all slaves [ 986.715958][T22275] bond13 (unregistering): Released all slaves [ 986.733020][T32418] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 986.968256][T22275] : left promiscuous mode [ 987.029654][T32425] team0: Device ipvlan1 failed to register rx_handler [ 987.059655][T22275] tipc: Disabling bearer [ 987.092181][T32427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7225'. [ 987.129600][T22275] tipc: Left network mode [ 987.245601][T32427] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7225'. [ 987.338266][ T30] audit: type=1800 audit(1764280661.812:16): pid=32450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7229" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1317 res=0 errno=0 [ 987.345998][T32427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7225'. [ 987.677875][T32460] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7232'. [ 987.733554][T32460] vlan2: entered allmulticast mode [ 987.745980][T32460] bridge0: entered allmulticast mode [ 987.798416][T32465] mac80211_hwsim hwsim70 wlan0: entered allmulticast mode [ 987.895898][T32470] tipc: Started in network mode [ 987.903572][T32470] tipc: Node identity ee63dbc747a5, cluster identity 4711 [ 987.913310][T32470] tipc: Enabled bearer , priority 0 [ 987.920593][T32471] syzkaller0: entered promiscuous mode [ 987.926097][T32471] syzkaller0: entered allmulticast mode [ 987.934240][T32464] netem: change failed [ 987.941077][T32469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7235'. [ 988.039632][T32471] tipc: Resetting bearer [ 988.075449][T32464] xt_CT: No such helper "netbios-ns" [ 988.118293][T32471] tipc: Disabling bearer [ 988.347812][T32489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7240'. [ 988.385726][T32489] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7240'. [ 988.552754][T32498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7244'. [ 988.713056][T32482] wg1 speed is unknown, defaulting to 1000 [ 988.728728][T32466] wg1 speed is unknown, defaulting to 1000 [ 988.728970][T32482] wg1 speed is unknown, defaulting to 1000 [ 988.749068][T32466] wg1 speed is unknown, defaulting to 1000 [ 988.749122][T32482] vxcan1 speed is unknown, defaulting to 1000 [ 988.830950][T32502] tipc: Enabling of bearer rejected, failed to enable media [ 988.869509][T32506] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 988.977018][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 988.985068][ C0] lec:lec_tx_timeout: lec0 [ 988.989739][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 988.999175][T32506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7248'. [ 989.191187][T32466] vxcan1 speed is unknown, defaulting to 1000 [ 989.217771][T32482] lo speed is unknown, defaulting to 1000 [ 989.550884][T32529] syzkaller1: entered promiscuous mode [ 989.556413][T32529] syzkaller1: entered allmulticast mode [ 989.634958][T32466] lo speed is unknown, defaulting to 1000 [ 989.671311][T32533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7255'. [ 990.273574][T22275] team_slave_0: left promiscuous mode [ 990.296860][T22275] hsr_slave_0: left promiscuous mode [ 990.317899][T22275] hsr_slave_1: left promiscuous mode [ 991.592476][T32584] netlink: 'syz.1.7267': attribute type 1 has an invalid length. [ 991.656622][T32584] 8021q: adding VLAN 0 to HW filter on device bond1 [ 991.678239][T32533] wg1 speed is unknown, defaulting to 1000 [ 991.684232][T32584] mac80211_hwsim hwsim76 wlan0: entered promiscuous mode [ 991.693639][T32584] bond1: (slave wlan0): Opening slave failed [ 991.700601][T32533] wg1 speed is unknown, defaulting to 1000 [ 991.703128][T32531] wg1 speed is unknown, defaulting to 1000 [ 991.708260][T32533] vxcan1 speed is unknown, defaulting to 1000 [ 991.714141][T32531] wg1 speed is unknown, defaulting to 1000 [ 991.955421][T32531] vxcan1 speed is unknown, defaulting to 1000 [ 991.964586][T32605] dvmrp8: entered allmulticast mode [ 991.970281][T32533] lo speed is unknown, defaulting to 1000 [ 992.240287][T32614] __nla_validate_parse: 3 callbacks suppressed [ 992.240307][T32614] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7275'. [ 992.265060][T32531] lo speed is unknown, defaulting to 1000 [ 992.424814][T32618] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 992.442940][T32618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7277'. [ 992.623227][T22275] IPVS: stop unused estimator thread 0... [ 992.673218][T32570] wg1 speed is unknown, defaulting to 1000 [ 992.681594][T32570] vxcan1 speed is unknown, defaulting to 1000 [ 992.989479][T32634] netlink: 'syz.0.7280': attribute type 11 has an invalid length. [ 993.187918][T32647] syz_tun: entered allmulticast mode [ 993.217477][T32647] dvmrp8: entered allmulticast mode [ 993.225394][T32570] lo speed is unknown, defaulting to 1000 [ 993.237178][T32641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7282'. [ 993.279262][T32646] syz_tun: left allmulticast mode [ 993.614005][T32655] netlink: 17 bytes leftover after parsing attributes in process `syz.0.7286'. [ 993.997044][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 994.005097][ C0] lec:lec_tx_timeout: lec0 [ 994.009907][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 994.125660][T32662] v: renamed from vlan0 [ 994.158406][T32662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 994.207767][T32662] netlink: 'syz.0.7288': attribute type 1 has an invalid length. [ 994.223609][T32662] netlink: 'syz.0.7288': attribute type 2 has an invalid length. [ 994.231694][T32662] netlink: 'syz.0.7288': attribute type 1 has an invalid length. [ 994.239743][T32662] netlink: 'syz.0.7288': attribute type 2 has an invalid length. [ 994.498320][T32676] tipc: Enabled bearer , priority 0 [ 994.506375][T32676] syzkaller0: entered promiscuous mode [ 994.511981][T32676] syzkaller0: entered allmulticast mode [ 994.521814][T32676] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7291'. [ 994.545160][T32676] bond0: entered promiscuous mode [ 994.551676][T32676] bond_slave_0: entered promiscuous mode [ 994.558066][T32676] bond_slave_1: entered promiscuous mode [ 994.566276][T32676] bond0: left promiscuous mode [ 994.573388][T32676] bond_slave_0: left promiscuous mode [ 994.573918][T32680] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7291'. [ 994.580135][T32676] bond_slave_1: left promiscuous mode [ 994.687802][T32648] wg1 speed is unknown, defaulting to 1000 [ 994.736584][T32680] bond0: entered promiscuous mode [ 994.763345][T32680] bond_slave_0: entered promiscuous mode [ 994.787298][T32680] bond_slave_1: entered promiscuous mode [ 994.811337][T32680] bond0: left promiscuous mode [ 994.816222][T32680] bond_slave_0: left promiscuous mode [ 994.822222][T32680] bond_slave_1: left promiscuous mode [ 994.840804][T32648] vxcan1 speed is unknown, defaulting to 1000 [ 994.891036][T32674] tipc: Resetting bearer [ 994.939129][T32674] tipc: Disabling bearer [ 995.068121][T32692] netlink: 'syz.3.7294': attribute type 11 has an invalid length. [ 995.142236][T32694] dvmrp8: entered allmulticast mode [ 995.252366][T32648] lo speed is unknown, defaulting to 1000 [ 995.614005][T32715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 995.638334][T32717] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7299'. [ 995.770859][T32719] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7303'. [ 995.854283][T32721] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7303'. [ 995.979500][T32724] syzkaller1: entered promiscuous mode [ 995.985176][T32724] syzkaller1: entered allmulticast mode [ 996.262993][T32730] netlink: 'syz.2.7307': attribute type 11 has an invalid length. [ 996.359062][T32716] wg1 speed is unknown, defaulting to 1000 [ 996.369480][T32716] vxcan1 speed is unknown, defaulting to 1000 [ 996.484858][T32737] tc_dump_action: action bad kind [ 996.526771][T32736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7309'. [ 996.683358][T32745] bond4 (unregistering): Released all slaves [ 996.806424][T32716] lo speed is unknown, defaulting to 1000 [ 997.128121][T32750] IPVS: length: 141 != 8 [ 997.288128][T32765] __nla_validate_parse: 2 callbacks suppressed [ 997.288146][T32765] netlink: 200 bytes leftover after parsing attributes in process `syz.4.7319'. [ 997.362324][T32767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7320'. [ 997.382011][T32767] netlink: 516 bytes leftover after parsing attributes in process `syz.2.7320'. [ 998.195015][ T338] syzkaller0: entered promiscuous mode [ 998.200733][ T338] syzkaller0: entered allmulticast mode [ 998.343257][ T343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7333'. [ 998.389601][ T343] ip6tnl2: entered allmulticast mode [ 998.645986][ T302] wg1 speed is unknown, defaulting to 1000 [ 998.655007][ T302] vxcan1 speed is unknown, defaulting to 1000 [ 998.707663][ T346] x_tables: duplicate underflow at hook 1 [ 999.017055][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 999.025141][ C0] lec:lec_tx_timeout: lec0 [ 999.029961][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 999.036658][ T352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7336'. [ 999.104590][ T302] lo speed is unknown, defaulting to 1000 [ 999.170625][ T352] team0: entered promiscuous mode [ 999.193341][ T352] team0: entered allmulticast mode [ 999.221308][ T352] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.273573][ T8529] tipc: Subscription rejected, illegal request [ 999.871749][ T390] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7345'. [ 999.894009][ T364] wg1 speed is unknown, defaulting to 1000 [ 999.911266][ T364] vxcan1 speed is unknown, defaulting to 1000 [ 1000.009086][ T393] bond4 (unregistering): Released all slaves [ 1000.250473][ T399] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7348'. [ 1000.367558][ T364] lo speed is unknown, defaulting to 1000 [ 1000.752911][ T401] wg1 speed is unknown, defaulting to 1000 [ 1000.769179][ T401] vxcan1 speed is unknown, defaulting to 1000 [ 1001.198496][ T401] lo speed is unknown, defaulting to 1000 [ 1001.413723][ T414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7351'. [ 1001.706142][ T418] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7352'. [ 1002.123771][ T429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7357'. [ 1002.250998][ T438] netlink: 'syz.0.7361': attribute type 1 has an invalid length. [ 1002.323183][ T440] __nla_validate_parse: 2 callbacks suppressed [ 1002.323201][ T440] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7362'. [ 1002.339540][ T440] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7362'. [ 1002.398716][ T443] netlink: 'syz.0.7363': attribute type 1 has an invalid length. [ 1002.418778][ T443] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1002.567481][ T445] siw: device registration error -23 [ 1002.572082][ T449] dvmrp1: entered allmulticast mode [ 1002.604301][ T451] dvmrp1: left allmulticast mode [ 1002.610330][ T451] dvmrp8: left allmulticast mode [ 1002.680298][ T452] IPVS: length: 141 != 8 [ 1002.839514][ T464] netlink: 'syz.0.7370': attribute type 10 has an invalid length. [ 1002.932510][ T470] netlink: 244 bytes leftover after parsing attributes in process `syz.1.7371'. [ 1003.104531][ T463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7369'. [ 1003.114543][ T469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7369'. [ 1003.235669][ T483] netlink: 'syz.4.7376': attribute type 1 has an invalid length. [ 1003.298472][ T487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7377'. [ 1003.320717][ T490] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1003.333322][ T487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7377'. [ 1003.385028][ T487] netlink: 'syz.2.7377': attribute type 18 has an invalid length. [ 1003.570788][ T510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7380'. [ 1003.634072][ T514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7383'. [ 1003.694380][ T522] syzkaller1: entered promiscuous mode [ 1003.715183][ T30] audit: type=1800 audit(1764280678.172:17): pid=512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7382" name="memory.events" dev="tmpfs" ino=1290 res=0 errno=0 [ 1003.735918][ T522] syzkaller1: entered allmulticast mode [ 1003.760782][ T522] netlink: 'syz.4.7385': attribute type 32 has an invalid length. [ 1003.790629][ T522] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7385'. [ 1004.037068][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1004.045149][ C0] lec:lec_tx_timeout: lec0 [ 1004.049874][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1004.070049][ T537] syz.0.7388: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1004.103129][ T537] CPU: 1 UID: 0 PID: 537 Comm: syz.0.7388 Not tainted syzkaller #0 PREEMPT(full) [ 1004.103158][ T537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1004.103171][ T537] Call Trace: [ 1004.103180][ T537] [ 1004.103189][ T537] dump_stack_lvl+0x189/0x250 [ 1004.103226][ T537] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1004.103254][ T537] ? __pfx__printk+0x10/0x10 [ 1004.103276][ T537] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1004.103303][ T537] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1004.103333][ T537] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1004.103364][ T537] warn_alloc+0x214/0x310 [ 1004.103401][ T537] ? __pfx_warn_alloc+0x10/0x10 [ 1004.103441][ T537] ? __get_vm_area_node+0x28f/0x300 [ 1004.103471][ T537] ? xskq_create+0xbf/0x170 [ 1004.103504][ T537] __vmalloc_node_range_noprof+0x690/0x12d0 [ 1004.103572][ T537] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1004.103606][ T537] ? __kasan_kmalloc+0x93/0xb0 [ 1004.103643][ T537] vmalloc_user_noprof+0xad/0xf0 [ 1004.103673][ T537] ? xskq_create+0xbf/0x170 [ 1004.103695][ T537] xskq_create+0xbf/0x170 [ 1004.103719][ T537] xsk_init_queue+0xb0/0x110 [ 1004.103743][ T537] xsk_setsockopt+0x57b/0x8d0 [ 1004.103767][ T537] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1004.103790][ T537] ? __pfx_aa_sk_perm+0x10/0x10 [ 1004.103821][ T537] ? aa_sock_opt_perm+0xff/0x1b0 [ 1004.103855][ T537] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1004.103875][ T537] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1004.103897][ T537] do_sock_setsockopt+0x17c/0x1b0 [ 1004.103927][ T537] __x64_sys_setsockopt+0x13f/0x1b0 [ 1004.103962][ T537] do_syscall_64+0xfa/0xfa0 [ 1004.103985][ T537] ? lockdep_hardirqs_on+0x9c/0x150 [ 1004.104009][ T537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.104029][ T537] ? clear_bhb_loop+0x60/0xb0 [ 1004.104054][ T537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.104074][ T537] RIP: 0033:0x7ff21478f749 [ 1004.104092][ T537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1004.104111][ T537] RSP: 002b:00007ff215696038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1004.104133][ T537] RAX: ffffffffffffffda RBX: 00007ff2149e5fa0 RCX: 00007ff21478f749 [ 1004.104149][ T537] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004 [ 1004.104163][ T537] RBP: 00007ff214813f91 R08: 0000000000000004 R09: 0000000000000000 [ 1004.104176][ T537] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000000 [ 1004.104190][ T537] R13: 00007ff2149e6038 R14: 00007ff2149e5fa0 R15: 00007ffc5c135238 [ 1004.104226][ T537] [ 1004.104281][ T537] Mem-Info: [ 1004.371319][ T537] active_anon:11815 inactive_anon:0 isolated_anon:0 [ 1004.371319][ T537] active_file:3816 inactive_file:40295 isolated_file:0 [ 1004.371319][ T537] unevictable:771 dirty:261 writeback:0 [ 1004.371319][ T537] slab_reclaimable:13881 slab_unreclaimable:177564 [ 1004.371319][ T537] mapped:29679 shmem:1364 pagetables:1396 [ 1004.371319][ T537] sec_pagetables:0 bounce:0 [ 1004.371319][ T537] kernel_misc_reclaimable:0 [ 1004.371319][ T537] free:1229957 free_pcp:14390 free_cma:0 [ 1004.426762][ T537] Node 0 active_anon:47260kB inactive_anon:0kB active_file:15264kB inactive_file:160984kB unevictable:1548kB isolated(anon):0kB isolated(file):0kB mapped:118716kB dirty:1044kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15184kB pagetables:5436kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1004.443060][ T551] ipvlan2: entered promiscuous mode [ 1004.460201][ T537] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1004.494312][ T537] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1004.580780][ T537] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 1004.640457][ T537] Node 0 DMA32 free:996172kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47160kB inactive_anon:0kB active_file:15264kB inactive_file:160984kB unevictable:1548kB writepending:944kB zspages:0kB present:3129332kB managed:2565044kB mlocked:12kB bounce:0kB free_pcp:50744kB local_pcp:23132kB free_cma:0kB [ 1004.749686][ T537] lowmem_reserve[]: 0 0 0 0 0 [ 1004.755665][ T563] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1004.766070][ T537] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1004.843825][ T537] lowmem_reserve[]: 0 0 0 0 0 [ 1004.860051][ T537] Node 1 Normal free:3908296kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:8016kB local_pcp:928kB free_cma:0kB [ 1004.899077][ T537] lowmem_reserve[]: 0 0 0 0 0 [ 1004.923179][ T537] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1004.960330][ T537] Node 0 DMA32: 1250*4kB (UM) 963*8kB (UME) 372*16kB (UME) 1064*32kB (UME) 441*64kB (UME) 190*128kB (UME) 521*256kB (UME) 456*512kB (UME) 272*1024kB (UM) 19*2048kB (UM) 51*4096kB (UM) = 998432kB [ 1004.981152][ T537] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1004.993078][ T537] Node 1 Normal: 186*4kB (UME) 62*8kB (UME) 51*16kB (UME) 268*32kB (UME) 93*64kB (UME) 18*128kB (UME) 5*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (E) 948*4096kB (M) = 3908296kB [ 1005.011947][ T537] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1005.023098][ T537] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1005.032900][ T537] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1005.042854][ T537] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1005.052647][ T537] 45473 total pagecache pages [ 1005.057621][ T537] 0 pages in swap cache [ 1005.083655][ T537] Free swap = 124996kB [ 1005.092676][ T583] netlink: 'syz.2.7400': attribute type 8 has an invalid length. [ 1005.093190][ T537] Total swap = 124996kB [ 1005.117551][ T537] 2097051 pages RAM [ 1005.121400][ T537] 0 pages HighMem/MovableOnly [ 1005.136311][ T537] 424148 pages reserved [ 1005.146440][ T537] 0 pages cma reserved [ 1005.629901][ T593] bond0: (slave bond_slave_1): Releasing backup interface [ 1006.001143][ T590] wg1 speed is unknown, defaulting to 1000 [ 1006.010362][ T590] vxcan1 speed is unknown, defaulting to 1000 [ 1006.098801][ T603] IPVS: length: 141 != 8 [ 1006.207888][ T608] macvlan2: entered promiscuous mode [ 1006.225525][ T608] macvlan3: entered promiscuous mode [ 1006.363136][ T590] lo speed is unknown, defaulting to 1000 [ 1006.377138][ T5146] Bluetooth: hci2: command 0x0401 tx timeout [ 1006.473043][ T618] geneve2: entered promiscuous mode [ 1007.197363][ T625] wg1 speed is unknown, defaulting to 1000 [ 1007.205462][ T625] vxcan1 speed is unknown, defaulting to 1000 [ 1007.220775][ T632] bond0: Caught tx_queue_len zero misconfig [ 1007.361050][ T634] __nla_validate_parse: 8 callbacks suppressed [ 1007.361069][ T634] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7415'. [ 1007.418419][T29974] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1007.514577][ T642] netlink: 'syz.0.7417': attribute type 6 has an invalid length. [ 1007.535656][ T625] lo speed is unknown, defaulting to 1000 [ 1008.027957][ T656] netlink: 'syz.2.7419': attribute type 11 has an invalid length. [ 1008.119734][ T659] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 1008.374139][ T651] wg1 speed is unknown, defaulting to 1000 [ 1008.405327][ T651] vxcan1 speed is unknown, defaulting to 1000 [ 1008.525162][ T676] syz_tun: entered allmulticast mode [ 1008.559113][ T675] syz_tun: left allmulticast mode [ 1008.776076][ T651] lo speed is unknown, defaulting to 1000 [ 1009.057056][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1009.065142][ C0] lec:lec_tx_timeout: lec0 [ 1009.070112][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1009.145258][ T682] netlink: 766 bytes leftover after parsing attributes in process `syz.3.7427'. [ 1009.321718][ T686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7428'. [ 1009.357138][ T687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7428'. [ 1009.465548][ T691] netlink: 'syz.4.7430': attribute type 10 has an invalid length. [ 1009.467421][ T692] netlink: 'syz.1.7429': attribute type 1 has an invalid length. [ 1009.474402][ T691] netem: unknown loss type 0 [ 1009.486426][ T691] netem: change failed [ 1010.044019][ T710] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7437'. [ 1010.361412][ T728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7444'. [ 1010.648506][ T741] netlink: 'syz.0.7448': attribute type 10 has an invalid length. [ 1011.149205][ T765] tipc: Enabled bearer , priority 0 [ 1011.156738][ T765] syzkaller0: entered promiscuous mode [ 1011.168714][ T765] syzkaller0: entered allmulticast mode [ 1011.197199][ T765] tipc: Resetting bearer [ 1011.330837][ T776] netlink: 'syz.3.7459': attribute type 32 has an invalid length. [ 1011.347284][ T763] tipc: Resetting bearer [ 1011.362877][ T776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7459'. [ 1011.386351][ T763] tipc: Disabling bearer [ 1011.429129][ T776] bond3: Setting coupled_control to off (0) [ 1011.435523][ T781] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7459'. [ 1011.599806][ T793] netlink: 'syz.4.7462': attribute type 1 has an invalid length. [ 1011.655416][ T796] netlink: 'syz.3.7464': attribute type 11 has an invalid length. [ 1011.772865][ T799] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7462'. [ 1011.879099][ T804] bond6: (slave geneve3): making interface the new active one [ 1011.887876][ T804] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 1011.902551][T22282] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1011.911792][T22282] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1011.912322][ T774] wg1 speed is unknown, defaulting to 1000 [ 1011.924292][T22282] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1011.936392][T22282] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1011.949687][ T774] vxcan1 speed is unknown, defaulting to 1000 [ 1012.121415][ T811] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7468'. [ 1012.369781][ T774] lo speed is unknown, defaulting to 1000 [ 1012.461062][ T832] gre0: entered promiscuous mode [ 1012.466172][ T832] gre0: entered allmulticast mode [ 1012.483357][ T811] IPVS: length: 141 != 8 [ 1012.865267][ T846] netlink: 184 bytes leftover after parsing attributes in process `syz.1.7479'. [ 1012.945260][ T840] wg1 speed is unknown, defaulting to 1000 [ 1012.954239][ T840] vxcan1 speed is unknown, defaulting to 1000 [ 1013.430053][ T840] lo speed is unknown, defaulting to 1000 [ 1013.497244][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1013.507457][ T861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7482'. [ 1013.533318][ T861] IPVS: length: 132 != 61234014512 [ 1013.589157][ T861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7482'. [ 1013.734085][ T868] netlink: 'syz.0.7485': attribute type 2 has an invalid length. [ 1013.773803][ T875] netlink: 'syz.3.7488': attribute type 21 has an invalid length. [ 1013.814367][ T875] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7488'. [ 1013.825718][ T871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7485'. [ 1013.828321][ T868] : entered promiscuous mode [ 1013.857072][ T875] netlink: 'syz.3.7488': attribute type 5 has an invalid length. [ 1013.864839][ T875] netlink: 'syz.3.7488': attribute type 6 has an invalid length. [ 1013.936030][ T875] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7488'. [ 1014.077037][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1014.085145][ C0] lec:lec_tx_timeout: lec0 [ 1014.090195][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1014.352568][ T896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7493'. [ 1014.397103][ T896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7493'. [ 1014.581068][ T893] netlink: 'syz.3.7492': attribute type 46 has an invalid length. [ 1014.764742][ T905] netlink: 'syz.3.7494': attribute type 2 has an invalid length. [ 1014.802032][ T905] !: entered promiscuous mode [ 1014.915018][ T909] netlink: 'syz.1.7496': attribute type 1 has an invalid length. [ 1014.999870][ T909] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1015.022507][ T916] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.7497'. [ 1015.039283][ T916] ksmbd: Unknown IPC event: 1, ignore. [ 1015.042423][ T891] xt_hashlimit: size too large, truncated to 1048576 [ 1015.052212][ T891] xt_hashlimit: max too large, truncated to 1048576 [ 1015.081595][ T891] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1015.083970][ T909] erspan0: left promiscuous mode [ 1015.141840][ T909] erspan0: entered allmulticast mode [ 1015.268446][ T940] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7500'. [ 1015.817699][T29974] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1016.279445][ T992] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.423415][ T992] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.532154][ T992] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.586560][ T992] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.759433][ T1005] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1016.770396][T22276] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.791106][T22276] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.896886][ T1005] bond_slave_0: entered promiscuous mode [ 1016.903156][ T1005] bond_slave_1: entered promiscuous mode [ 1016.929076][ T1005] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1016.989107][ T1005] bond4: (slave macvlan2): Enslaving as an active interface with an up link [ 1017.020791][T22274] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.076063][ T1008] gretap0: left allmulticast mode [ 1017.082331][ T1008] gretap0: left promiscuous mode [ 1017.087964][ T1008] bridge0: port 3(gretap0) entered disabled state [ 1017.119715][ T1008] bridge_slave_0: left promiscuous mode [ 1017.125655][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.142584][ T1008] bridge_slave_1: left allmulticast mode [ 1017.152579][ T1008] bridge_slave_1: left promiscuous mode [ 1017.163176][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.195538][ T1008] bond0: (slave bond_slave_0): Releasing backup interface [ 1017.207448][ T1008] bond_slave_0: left promiscuous mode [ 1017.224556][ T1008] bond0: (slave bond_slave_1): Releasing backup interface [ 1017.255906][ T1008] bond_slave_1: left promiscuous mode [ 1017.272534][ T1008] team0: Port device team_slave_0 removed [ 1017.286241][ T1008] team0: Port device team_slave_1 removed [ 1017.293977][ T1008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1017.301803][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1017.318366][ T1008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1017.342032][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1017.353396][ T1008] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1017.388668][T22274] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.409972][T22282] bond4: (slave macvlan2): link status definitely down, disabling slave [ 1017.537497][ T8529] bond4: (slave macvlan2): link status definitely down, disabling slave [ 1017.626336][ T1044] netlink: 'syz.1.7525': attribute type 1 has an invalid length. [ 1017.945519][ T1079] netlink: 'syz.2.7531': attribute type 11 has an invalid length. [ 1017.997592][ T1088] __nla_validate_parse: 7 callbacks suppressed [ 1017.997612][ T1088] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7532'. [ 1018.030368][ T1091] netlink: 'syz.0.7533': attribute type 1 has an invalid length. [ 1018.086170][ T1091] netlink: 'syz.0.7533': attribute type 13 has an invalid length. [ 1018.179922][ T1101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7536'. [ 1018.313107][ T1108] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7536'. [ 1018.808199][ T1129] tipc: Enabled bearer , priority 0 [ 1018.859077][ T1128] tipc: Disabling bearer [ 1019.099237][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1019.109446][ C0] lec:lec_tx_timeout: lec0 [ 1019.114053][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1023.634503][ T1148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7548'. [ 1024.424944][ T1148] openvswitch: netlink: Flow actions attr not present in new flow. [ 1024.940771][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 1024.951944][ C0] lec:lec_tx_timeout: lec0 [ 1024.963906][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1029.980920][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1029.992695][ C0] lec:lec_tx_timeout: lec0 [ 1030.010590][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1035.020863][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1035.031864][ C0] lec:lec_tx_timeout: lec0 [ 1035.043596][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1038.526272][ T1162] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7552'. [ 1040.062568][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1040.073248][ C0] lec:lec_tx_timeout: lec0 [ 1040.085856][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1045.102592][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1045.112956][ C0] lec:lec_tx_timeout: lec0 [ 1054.564732][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1059.902444][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5330 ms [ 1059.913295][ C0] lec:lec_tx_timeout: lec0 [ 1061.025652][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1061.255837][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1061.375767][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1061.824937][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1062.335118][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1065.746158][ T52] Bluetooth: hci3: command tx timeout [ 1067.834167][ T52] Bluetooth: hci3: command tx timeout [ 1069.926760][ T52] Bluetooth: hci3: command tx timeout [ 1071.845954][T29974] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1071.985988][T29974] Bluetooth: hci3: command tx timeout [ 1072.115657][T29974] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1072.315494][T29974] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1072.646908][T29974] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1072.794156][T29974] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1075.745127][T29974] Bluetooth: hci6: command tx timeout [ 1077.034173][T22281] dvmrp1 (unregistering): left allmulticast mode [ 1077.843613][T29974] Bluetooth: hci6: command tx timeout [ 1079.934771][T29974] Bluetooth: hci6: command tx timeout [ 1080.086407][T22281] bond5 (unregistering): (slave geneve3): Releasing active interface [ 1082.044099][T29974] Bluetooth: hci6: command tx timeout [ 1087.214508][ T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1087.496585][ T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1087.714471][ T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1088.265790][ T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1088.574666][ T5146] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1091.665404][T29974] Bluetooth: hci7: command tx timeout [ 1093.326308][ T5146] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1093.446552][ T5146] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1093.546258][ T5146] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1093.756885][ T5146] Bluetooth: hci7: command tx timeout [ 1094.114420][ T5146] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1094.485367][ T5146] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1095.855325][ T5146] Bluetooth: hci7: command tx timeout [ 1097.664123][ T5146] Bluetooth: hci5: command tx timeout [ 1097.906680][ T5146] Bluetooth: hci7: command tx timeout [ 1099.765561][ T5146] Bluetooth: hci5: command tx timeout [ 1100.966179][T22281] bond7 (unregistering): (slave bridge6): Releasing active interface [ 1101.825267][ T5146] Bluetooth: hci5: command tx timeout [ 1103.905297][ T5146] Bluetooth: hci5: command tx timeout [ 1111.075241][T29974] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1111.196531][T29974] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1111.304076][T29974] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1111.543576][T29974] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1111.916307][T29974] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1114.623718][T29974] Bluetooth: hci1: command tx timeout [ 1115.966694][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1116.703524][T29974] Bluetooth: hci1: command tx timeout [ 1118.795159][T29974] Bluetooth: hci1: command tx timeout [ 1119.546823][T22281] bond0 (unregistering): Released all slaves [ 1120.396466][T22281] bond1 (unregistering): Released all slaves [ 1120.876512][T29974] Bluetooth: hci1: command tx timeout [ 1120.981045][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1120.992449][ C0] lec:lec_tx_timeout: lec0 [ 1121.126533][T22281] bond2 (unregistering): Released all slaves [ 1123.583548][ T5146] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1123.816540][ T5146] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1123.946709][ T5146] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1124.304124][ T5146] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1124.496232][ T5146] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1127.344589][ T5146] Bluetooth: hci8: command tx timeout [ 1129.435695][ T5146] Bluetooth: hci8: command tx timeout [ 1131.515276][ T5146] Bluetooth: hci8: command tx timeout [ 1132.815273][T29974] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1132.985863][T29974] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1133.125452][T29974] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1133.585505][T29974] Bluetooth: hci8: command tx timeout [ 1133.764458][T29974] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1134.094209][T29974] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1135.356774][T22281] bond3 (unregistering): Released all slaves [ 1136.884467][T29974] Bluetooth: hci9: command tx timeout [ 1138.954542][T29974] Bluetooth: hci9: command tx timeout [ 1141.034607][T29974] Bluetooth: hci9: command tx timeout [ 1143.105620][T29974] Bluetooth: hci9: command tx timeout [ 1147.983165][T22281] bond4 (unregistering): Released all slaves [ 1148.246587][ T5146] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1148.495760][ T5146] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1148.644213][ T5146] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1149.394332][ T5146] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1149.675799][ T5146] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1150.274980][T29974] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1150.765315][ T5146] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1150.896010][ T5146] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1151.454558][ T5146] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1152.304086][ T5146] Bluetooth: hci10: command tx timeout [ 1152.334515][ T5146] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1154.385620][ T5146] Bluetooth: hci10: command tx timeout [ 1155.105480][ T5146] Bluetooth: hci11: command tx timeout [ 1156.465160][ T5146] Bluetooth: hci10: command tx timeout [ 1157.205563][ T5146] Bluetooth: hci11: command tx timeout [ 1158.554263][ T5146] Bluetooth: hci10: command tx timeout [ 1159.265133][ T5146] Bluetooth: hci11: command tx timeout [ 1161.365634][ T5146] Bluetooth: hci11: command tx timeout [ 1161.983331][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1162.495269][T22281] bond5 (unregistering): Released all slaves [ 1170.175957][ T52] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1170.365238][ T52] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1170.536077][ T52] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1170.934408][ T52] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1171.156224][ T52] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1173.986055][ T52] Bluetooth: hci12: command tx timeout [ 1175.786096][T22281] bond6 (unregistering): Released all slaves [ 1176.065249][ T52] Bluetooth: hci12: command tx timeout [ 1176.754505][ T31] INFO: task syz.3.7545:1134 blocked for more than 143 seconds. [ 1177.095520][ T31] Not tainted syzkaller #0 [ 1177.244640][T22281] bond7 (unregistering): Released all slaves [ 1177.325647][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1177.386779][ T1300] lec:lec_start_xmit: lec0:No lecd attached SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1177.554840][ T31] task:syz.3.7545 state:D stack:25216 pid:1134 tgid:1133 ppid:27601 task_flags:0x400140 flags:0x00080003 [ 1177.863495][ T31] Call Trace: [ 1177.866828][ T31] [ 1178.004682][ T31] __schedule+0x1798/0x4cc0 [ 1178.143796][ T52] Bluetooth: hci12: command tx timeout [ 1178.386667][ T31] ? __lock_acquire+0xab9/0xd20 [ 1178.484909][ T31] ? __lock_acquire+0xab9/0xd20 [ 1178.573678][ T31] ? __pfx___schedule+0x10/0x10 [ 1178.675986][ T31] ? schedule+0x91/0x360 [ 1178.856454][ T31] schedule+0x165/0x360 [ 1179.085530][ T31] schedule_preempt_disabled+0x13/0x30 [ 1179.315324][ T31] __mutex_lock+0x7e6/0x1350 [ 1179.546021][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1179.706937][ T31] ? ib_get_eth_speed+0x151/0x7b0 [ 1180.125457][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1180.224578][ T52] Bluetooth: hci12: command tx timeout [ 1180.292103][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1180.315560][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1180.330481][ T31] ? ib_device_get_netdev+0x220/0x2f0 [ 1180.335898][ T31] ib_get_eth_speed+0x151/0x7b0 [ 1180.395825][ T31] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1180.535519][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1180.664376][ T31] ? rxe_query_port+0x6b/0x3b0 [ 1180.906469][ T31] rxe_query_port+0x93/0x3b0 [ 1181.054659][ T31] ib_query_port+0x170/0x830 [ 1181.194580][ T31] ib_setup_port_attrs+0x24e/0x2070 [ 1181.275128][ T31] ? rcu_is_watching+0x15/0xb0 [ 1181.383190][ T31] ? trace_contention_end+0x39/0x120 [ 1181.573330][ T31] ? device_add+0x9bb/0xb50 [ 1181.723687][ T31] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 1181.904702][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1182.203642][ T31] ? device_add+0x70b/0xb50 [ 1182.405763][ T31] add_one_compat_dev+0x3d6/0x5c0 [ 1182.535557][ T5146] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1182.774389][ T5146] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1182.875868][ T31] rdma_dev_init_net+0x1dd/0x270 [ 1182.934369][ T5146] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1182.940877][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5550 ms [ 1182.951844][ C0] lec:lec_tx_timeout: lec0 [ 1182.983730][ T31] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 1183.303432][ T31] ops_init+0x35c/0x5c0 [ 1183.533846][ T5146] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1183.773562][ T31] setup_net+0xfe/0x320 [ 1183.865596][ T31] ? __pfx_setup_net+0x10/0x10 [ 1183.915646][ T5146] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1184.035241][ T31] ? copy_net_ns+0x337/0x4e0 [ 1184.224859][ T31] ? down_read_killable+0x1d1/0x350 [ 1184.416337][ T31] ? preinit_net+0x47d/0x780 [ 1184.655509][ T31] copy_net_ns+0x34e/0x4e0 [ 1184.945135][ T31] create_new_namespaces+0x3f3/0x720 [ 1185.124368][ T31] ? security_capable+0x7e/0x2e0 [ 1185.236804][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 1185.415951][ T31] ksys_unshare+0x4c8/0x8c0 [ 1185.646238][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 1185.754570][ T31] __x64_sys_unshare+0x38/0x50 [ 1185.975450][ T31] do_syscall_64+0xfa/0xfa0 [ 1186.086038][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1186.305868][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.544393][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1186.644449][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.705573][ T52] Bluetooth: hci13: command tx timeout