last executing test programs: 2.308899119s ago: executing program 2 (id=6765): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa3, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xf1, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000400)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6, r5}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r7) sendmsg$NLBL_MGMT_C_LISTDEF(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r8, 0x601, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000000606050000000000000000000300000a05000100070000000900020073797a30000000000900a1c2a96c7a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC=r2, @ANYRESHEX=r0, @ANYRESDEC=r2, @ANYBLOB="e58c8c16cf7103dea670722694", @ANYRESHEX=r2, @ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xe, 0x0, &(0x7f0000001c80)="7993ff011900000000a63b00008f", 0x0, 0x8001, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 2.032095497s ago: executing program 2 (id=6767): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f00000000c0)=0x11) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x400c000) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000080)=0x207dcbd, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000003340)={0x3c, r5, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.872692856s ago: executing program 2 (id=6768): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r0 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r0, 0x29, 0xd0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0xe) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x2, 0xe875, '7l9', 0xff, 0x9}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x6c}, {@private=0xa010102, 0x4e20, 0x3, 0xcd, 0x1}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3f4}, [], {0x14, 0x3f9}}, 0x28}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x9}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)={0xb0, 0x5e, 0x1, 0x4, 0x0, "", [@generic="2fa1adee0523f95bbbe8ed88618132ba9c7e52904fe0af7feb1da7085190f36ddbeec0ebff4b0b92fd8b213119921625d83f31fe749b673720eebecc88478756313e8f4b4481296f94fa080242cc00f7cbb7398dd27563b27ed5f732c01ddbc6e605d757e6604150d40141f51039f70b171d2377bcef7dbc4b83763aea8cedc82a492224d9d8b57f498078ee59409ae4c690e5cc2f476784dfbe2566e9af42"]}, 0xb0}], 0x1}, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x84, &(0x7f0000000000)={r12, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1, 0xfffe}, 0x90) writev(r9, &(0x7f0000000340)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}, {&(0x7f0000000200)="425ab9a051c0c86647c2bf6af9ec470a1d605714e08f2e1b05ddfb29bef71dc633534bee0b9179e735b5554e13361c28ec74b9", 0x33}], 0x2) sendmsg$nl_xfrm(r1, 0x0, 0x0) 1.519268334s ago: executing program 0 (id=6773): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0xfffffffffffffd8b, &(0x7f00000002c0)={&(0x7f0000002f40)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r1, @ANYBLOB="8b04040000000000300012800b00010065727370616e0000200002800400120006001800000040000500160002000000050017"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003480)={0x30, 0x40, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\x1c'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x6}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.398604293s ago: executing program 0 (id=6776): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto$inet6(r3, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r1, 0x946b000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f0000000040)) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000180)="560003000000", 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000104000000000000000000000500", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r6], 0x40}}, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) accept4(r1, 0x0, 0x0, 0x0) (async) socket(0x10, 0x2, 0x0) (async) sendto$inet6(r3, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) (async) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r1, 0x946b000) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f0000000040)) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r0, &(0x7f0000000180)="560003000000", 0x6) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000104000000000000000000000500", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r6], 0x40}}, 0x0) (async) close(0x4) (async) 1.157465383s ago: executing program 4 (id=6780): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) unshare(0x2c020400) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) r2 = socket$inet6(0xa, 0x805, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32, @ANYBLOB="100001800400048008"], 0x28}}, 0x0) getsockopt$bt_hci(r2, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000002a00)="f8", 0x1}, {&(0x7f0000001100)="5396704452d6265ae9babf11a772d3051184f96a0eedaee76f010acd3b242e6fe2bc77599527353bec47055998012e1987a4aec8a3f5dc2a05b231a36729f6b5040abf8b54121167f192541b2644876a4660844ee20b3d00cc8d73b176c6017cc4d3b2e8b451d509724e479e0031d13a654dd157adade6fa1d0562ae17a4d68e6d456cca2585b8f677ed5d155c45fa2b1f9f92362efa7c15a1a6e45ea96965ecbcc96e8f9afac2b5c1f16a03599b09598a", 0xb1}, {&(0x7f00000011c0)="82d707f63eb44d332284d7a55e661b53792840595aeffd80a04b0920f4081cfd32abfe926ad528a987049b40ab7868a298233fc8f81edd0c23a7f651ca018ad61077d86d879220e99340830d553ccd5844775bdde7928e08feb80bb223690cc17f0e43c3f4a76ad26fbb16b0e458bd89e8cef52d14aaa1cb992f4094a40662130247e1045b88ace5152bdd9d4bd9ebdc5d8f8d2d86870235e7fdcbfbb32d6c23ad9aca0fdf8e53b7dce5a58635d49c44571f65d1548b68c34ba014be3e7ed3b052e1dfdc077c6106951043fbf24eb36da108727c40a925f6471189", 0xdb}], 0x3, &(0x7f0000003a00)=[{0x10, 0x1, 0xd}], 0x10}}], 0x2, 0x40088c5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x10000000, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000040000000003000000000000080100000000000000000000020200000000002e2e5f"], 0x0, 0x44}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040000000050017"], 0x50}}, 0x4080) 1.013385293s ago: executing program 4 (id=6783): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x30, r5, 0x5, 0x1000000, 0x101, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5e00}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x890}, 0x840) r7 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r7, 0x0, 0x4) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x20004804) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESOCT=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0xe, 0x0, &(0x7f00000004c0)="0000000000005eefc9bb9fd1b208", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x1}, 0x8) sendmmsg$inet(r9, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10, 0x0}}], 0x1, 0x4014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000870a000000000000637e00000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x5, 0x114, &(0x7f0000000180)=""/276, 0x41000}, 0x94) bind$llc(r0, 0x0, 0x0) 1.006937996s ago: executing program 3 (id=6784): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002840)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000de000000080000000000006100"], 0x0, 0x28}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'hsr0\x00'}) socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0}, 0x40000120) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x2d, 0x20040040) bind$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r5, 0x0, 0x40000) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r6, &(0x7f00000000c0), 0x0, 0x6000000000000000, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14}, 0x94) 909.054343ms ago: executing program 2 (id=6786): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x138, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x85}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @empty, 0xc}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9d}]}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x440c0}, 0x44844) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe4, r3, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xf}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0xc0, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xa}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}, {0x4}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x401}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x276}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x489}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xa}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000001}, 0x1) r4 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x300, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040401) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x1, 0x5, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x1) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000009c0)={'batadv0\x00', 0x0}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x7, [@struct={0x4, 0x3, 0x0, 0x4, 0x0, 0x4, [{0x3, 0x5, 0x41af2581}, {0xa, 0x0, 0x7}, {0xb, 0x0, 0x2c3dc97e}]}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x2}, @float={0x6, 0x0, 0x0, 0x10, 0xc}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x400}}]}, {0x0, [0x61, 0x5f, 0x2e, 0x0, 0x61]}}, &(0x7f0000000a80)=""/59, 0x7f, 0x3b, 0x0, 0x9}, 0x28) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@bloom_filter={0x1e, 0x6, 0x551, 0x7, 0x41402, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x9}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x18, 0x4, 0x5, 0x4, 0x0, 0x1, 0x557, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x6, 0x12, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x44}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@jmp={0x5, 0x1, 0x5, 0x1, 0x5, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0xa, 0xb, 0xfffffffffffffff4, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x89938903c1ffa293}}}, &(0x7f0000000900)='syzkaller\x00', 0x4, 0x6d, &(0x7f0000000940)=""/109, 0x40f00, 0x8, '\x00', r7, @xdp=0x25, r8, 0x8, &(0x7f0000000b00)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x8, 0xf66e, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff, 0x1, r9, r10, r11], &(0x7f0000000d40)=[{0x0, 0x3, 0x4, 0x5}, {0x4, 0x5, 0xb, 0xa}], 0x10, 0x8}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0xb0, 0x1403, 0x100, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20044051}, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r13, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x40, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xb408}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xf5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xf}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) write$cgroup_devices(r6, &(0x7f00000010c0)={'a', ' *:* ', 'w\x00'}, 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000001100), r6) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001140)={r12, r6, 0xa, 0x0, @void}, 0x10) r14 = accept$alg(r6, 0x0, 0x0) sendmmsg$alg(r14, &(0x7f0000001780)=[{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001180)="47e549e17ebc3f06ee17db75d658d5b5caae11d18c52194821d09a51b31cfdf55d72d6dc5041061cd6c90632388579ab1d401e4e1d2f5e269df94e1081d3ed9a1e26af572b7c4ff629da97f4277d3e363372a571d1e7d77e864160bd76c44cadb2a994ba9d960ada3930d7a095e889a9ba9714e0a814096f5d9979832a1e4f702eba6463b0b769232557ef6cb518e199842a1a6066", 0x95}], 0x1, 0x0, 0x0, 0x44011}, {0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001280)="7c9d768357a7b69e9202a706f5d39ffcceb4f9e570719a2bf083e91e8a8c89bd6d0c1ec234e1bf9910334fa6e3fae6fa8ea6dfb2b90accfea54e55f2e9d29bed4364d20377a3ee6dd67d2ef0636b5ca9ddbea12750613ab4b2490a818121283764b884cd5b79093ad6104f6d81f5619f93464cc2aa65dd3d136523c870b945b94c624dc242136b885d003a7f3507f4190d65609cb69b27cbbcb1b2868e391bb699f08385b98785e906b60381de2785be2b47195b14e748f957d9aeab458284bf66d84c3d8a3943f110306a3cde2aa2dc9528621af38b2c5704bb738c4002b8631ef967775c5eea45663587f3", 0xec}, {&(0x7f0000001380)="5648bd4b6432138d8ab193afe899537bf3dd8f4f8ed7b038ef77f937f3c8627dca520ea287ce7dd7be18476cf89b2b1c447a39ca0fd3a692f8571b7f2a948c4a2091df369391dbd39ba04d47bed418d9d19dc990338c21", 0x57}, {&(0x7f0000001400)="4000208670ea0d69d3632e405bd8fe2d8df64575991290a2ed71b1dc4d939d252872c8c8c0b9bf569929973bbb7527464fdce2378f2e491e8bcadae238f03078273b77534edc022ffb8056c9540fbc02b7", 0x51}, {&(0x7f0000001480)="1eea0cc8515a06165442bf13d6aa950058cf639be3d10242f98e7400e22bd9dab4dc4f6d3c18a6ad2e2f69c9f12b61c74377e2323db49c7e91561abb1662a2c157d6c01db476804951b2c95152ccf5602d9dd789cd5093f3ab541420fd2aae71c51e8bc8ee2f1d4b", 0x68}, {&(0x7f0000001500)="cb115125ade5002e9c714aed25e28a721f4f99", 0x13}, {&(0x7f0000001540)="0b376267ee4b9cd8ec355791ca9717ea9b4affdf9c7ac63dc9b850468835427626cf4bab3f9cc1a52e112bd8586fa660cf06e05ff7bf2de6e226aaed89626fe45d67aadf56bad6f7f96a01d593eb181495", 0x51}, {&(0x7f00000015c0)="d2e222777884200e46fd54517d27cb755b5e79fb55855a95f5c0dc1d89bdeffd3e83e5ae37967fcd192549ef3c206701fff8f9b8c2e63931a804b5c5c7c7ca6979ab685109f4081e582bb62990331c20b02d7c4b336485504fadce3b537095b9ffc20c8b6b43cfedb99b1b0cfcc44480fff6afea19b31af59697aab571e4267e502d1b711d6e7b03d95a2f7ce336c70c53091a78945bca247f09d5f7", 0x9c}], 0x7, &(0x7f0000001700)=[@iv={0x58, 0x117, 0x2, 0x44, "049302e9ed79bc96a831a56706e9afd52669d39ba2898b77f87e2da15fc581e2d6c92ff0f0cb1e0b9acf4dba436756f8d8b18230eed73a0e1d9acd6e8c961071b04f30df"}], 0x58, 0x40080c4}], 0x2, 0x40000) ioctl$BTRFS_IOC_SNAP_DESTROY(r9, 0x5000940f, &(0x7f0000001800)={{r8}, "cfa0a038db899f710e060108ec3a4d97f5d3a254cad8b6ef26868030cba56dba88d67feea09534fca6f3ca304053d2b6f07430761e9ec7566ab53b1a55f8fcee2e1c7be620eb70e8e6cc46b8ece8f17379b36132873cfd8472fc6094e1fbfcbce46b0b650deaf70f2bc0c5d6c94bbea71c6bbc3ffeb694c13935808566825d3031442598dab2fee07f19990e9502a9ed953df6fd59bdb246f185eb89f77234fdccdb19db84d91f14d8a5bb852e677c838eb2052c4ccfcf3e4b55d545ca3388928043bcc17f3837a7d68793fa49a42dc5a32d1986abd43b25965cbcb35b7a4362fbf0f6006ed8c350f01ee11e14b1fbd8f5a9b9afbba2d1241016649804fe23e30ea37d05e519b27f59f0b68a72e3536dc01628d67b51af6ebcba459eca92685ec3ce2b12fb2aa7bcd0867e405eb1879365755fe25e84f39ca7854a8507374c3db7c5081b8f3334a89c06881e3ccc71810e3d63783a716997b45b28a431e83d77ce0fa8210fa5c5bb746f3ae4798f32923bb18530aefc2717762dbfbdd0820da4e14e13c1f5c47d5c8ca3ae2ceeb88b52384f9c504f034232fc9fc9c68ae1360d72e68da3cc951122dcab84ae9683de78ccb995b5f691d6e45858a4b1341981309e84489dd70241b364c9a602603c51f70e841d17f0fb1c6d6ee3db9d15c239888fc7ac225ca25884f879a600b8ee7d2d5075ad8da9a07d2a56d9ceb6447d85967b7f3431a739d07383d598466fcd2d14d4d9c1889fb5666cc2c046af632366835c985037f3151f1efb53cab74f19c247049e8f1ed41d7d545301744eb0c487e1b34755b0a84b32a212f4ed70bcb5ee5eef25933732c48c44c2abb22fa7f13c4121ae763e02d9e3789eb66415de7e7f324a716473f9c594ec41f5a0068ae64abb68ba9f25c6e3f9cd0b415eff10a238fd1911c4325fbd1ae712c7bd0424eaa6b96fb335bc3cc0ec29ff4257b6ae7c55b0c0d31815dfca1a831e3d4065a9933fc2e3d71ea39feea101a41d2e6efdf3c09e9b5ac346536bc47be9e54e0d84be6c823b331cf7c9eedb9b8708f2709fbeafcec685c506e00ee94a0ae3039e72edec490969503167c9b456cf115efc1ec101144881ab810176781cc9581b627af860ae58919a41c1d65c3df456bb905490e909b1751efb0b2f3bb57ab7072632937cbe37fa9ffef6976d6e73341f88ffab9c7c8a6df61153796f43b9768df16ee098fc016c2b7950e544e63479362512fa5ffd574a84f190b247a033e4552fa746dd43017683609da1826572c035feb8127aaf30c89dfeaab97fa05356c665375cdff0c3212c54659365b6ee9ae5fad1966bb4f7d22c6f2ea658a08527e7899eecf323c069f528baa4858ef35922b9f5db267b746908cd9fc605182f63dafff00a97a1ecaf1cb90ad1c8501e98123cc51010a5d1d7846cfb0c20d83b50ce7d52d6cc22b45428919bf130c6f68f9199225165b8039f1e47c33dad0dae74c393159ff29f98911e82834329dde56f5b7b9fccef6e3275a88b3cdd44cb21cff3d1538d1978d05d987a9e63b4332e21b7bf15afc0cd33e588489f73c2c44841eb6306854218fcbf9f9e4b24ecf21951bdfdbf9cf56dd6c3f5ca2eb75106a67b299949787dbb95a7817807b0d043f3fd9ba548698ee1e29194587d1bf5d566e60ee5c340f42ef686794549dd5c919540c6831a25bbcf1657585f19f2d82862a1ca8dec0ed88d636d112e48111ef656e93cc6071e1f3d9524dceeed4f90c783945faca040978f36148eceb0989411598d63eba12907b0b2b1e17b7625b9db18dc9c36276bca7f590694c12ce7361f1a92077df9a7868df5cd69085bb5744f0336f43b2d621349902242be35643e512bdde3c086d53d8dfa5cd872ee48be13c3347ce0390b4f2ba14f6d72791879cbd313409390035bdffe9564788988aebe1731bf2aac01f9c9378417ef1154ca92d5a63d092507998b99a740a014c340b54b34b438f61f4b4dfe7104b6a18af5465d620b7d2932822e31b4a38da842654bfafa24cd38c527c5dc818f8af0ea896909856f0e915fbd7f9ced98ccbeb821150822323563b321bc3b41d0a8445dd90ca298c6dc874b0b30d7e85ea2e090b251daac19e40ce46120b419847a9070b40387b99318bf1befc757d31239872f39e76720f29a47811acbd2df05470fdcdba876fed66ecd9320c1528576c2678488bb47021ba56aeccb46f7ebf524ade14468a826f0ea1754dd88b298f0e2853b7c6db506ddd3cb1e772a3c1615e343b799dcabd57141f04ab0200326bb687f9af1b41ca19092695c2510342727ff6ab94fa44da9cbe17b12bafc6855cbda2cbf617906993a53a917a7311cb72ac4e43ea12625a6b05305e58d7dc3a7fc4193e555161651335f0a42ab538cca2f42f15c76946cb2ba397df8925bab64ca2ffeb2aed1aaf4e97593d377b93e3b8be3f1abaa3a67c520f1d15820f780300cfe6096647f87cc320f550507a0d759616552b0d3a64f7651614e9ac644b14971019585451bea959e5658b34ae64ed0185b16e4c1ce282ea30cc0035030222a3e1e3ae7053e49408bc27ca520842e63b3bfd4857bdfa584c823c3892a606bd4dae3733da8c8fc08d2902aaee3139c4167a07a194dd5fb18f17efdd3cf2adb1e928c08fc92b1b8470c98acbaca0a2797e7e850b5ba0c47231f8a39f0e91bde9d2f83b4df0952db42e4f9448f5b4a1fab14013e6b118c56e95ac028e7a5a18df429190da251655ba186ea5f54112fcc3119765a0db1292957e4c3636622a9e8f043b8cb9f1b8ec52cdd663a76c2c9dfc253dc83c8448478e8fe0f7d2c5e10607fdc9fa73261f56f1cfe16101ca61f6985e6ad8955dcc1e293495b42d73339557be609a8b7fccea0734489277660a2c541d361ec1fee4fa059a430b51532e6d3e69dd71337fac9f15a6307c0e1bf8b71f2d3837b13f4a8d6101c130e87d5f76d8d06944f87d7558bbe69d50825a9df79f04e6a5428412f818f2092ab1a763be7ae7aefd0b400b4f6edb33900179ea10ae166a268e4a408b08fb5da2ccd7b1c8f9d5a4e6cd871020e62c889770437e006d4c2dc64f947b178cb2dfb4d21170de30f8d993dbbd9c69334bd25dea011e1b8a3d76dd1a67ffc3acce2763410751455889a98114bc1cdcbbae94e1f887756d110f0ad721a446837910e5979f4732b1fab9c7f9be5424b1eb23ba726245e7ac88b44c0de4859869c1f7004fc9e9a6ac665c77a93df6bf31215f3549eed2bc00384bed8661f4c68815bacc182b9d10b069070d2139bf199448acf37032dce71225ec98f83be72618f114c3560e0d940bc7df13319e0937c74092072181628ad51cff25845232d27cbdc20b76fce695b28ebf2e4ef99432bc51fe57945f501c40cff0a91d3918228e299fa733c5047c0cb48ffa08a6d22ee493b5132804c51a980435d2fd4e8b71687d6868c12a165a2b4e1b8351a0dc143b94b5b58aa3035b44e4aaf08b28a90d4df84b2baf8adcbec004a2fe0696457384447658f31fe1a9dac3c70ea4ecc5808f0ea44233e09a456f40193a58d7b6d1fab1c8a52e8d43e92d733addaebad7198357873648eccc6ec6ff2a5516330adb4282209cf580dcd679be0db21884408954af7d956bbc19713b1473d8a7881ae12945ec2e6384583b1cd5a6cf39b5820698142994c64613e2ff0fefe70c1e4b4e17e8d285d52070043c6a32b7b88f6a1750fbe64624a4b4f7d2938d89b1041f2cd9a1066472dd0712f9cfc4cde03dee9e484694f9b8e78dcd5aba9d71ec9cd5a738346a1ba55fcdcb8b29ecb7bb47e15f9fe654e60b95644bf3686d7adb6ac3e43d5f0ab8fb2bc81df92034b0c5e5c3c42d3dade0772206c1c63c93980bcb33f87c193bdb3d1964ed5cd66ed98c40e6d07c7fa21915dac1ba93b068bddc3bfce666bb974bb2875eaab2ab6def89ed42de6ead818d87300e122a264cdeb95c47404cdf29d5104a0ae7e8f475f77f7e22ce8810b993ddfcd2223f03579ec6d4912d3503445f9df32186824a1f4b0a4bceae5a3a3b73bdbac71a35c6ada08d8dda43e1cbce9c071c2dc07bb34bfdcb91a6b5000ee9124fbec71c6a88d1ebe5af4e9b48b0212034f750c5302e8103fbb5ca9732947d1e801ffdc78bf0ccf607af4772d6e54a153c95deafe3474385adc3b2fe985cf7b019b2f3c9936a4d1e55b48fb8a021ed86676e203958e29df1cd1e3d3091ff5a71b5d1c17a9ca84e73ba6a1870261b85323fc74e5781c6d5a0d113edb2221bc07f9031956191dcd077705e7fcb643192ca1deaf569cec98365fc57bd6553cf246875d8d189f8ce2ecf9055f18e7324530c208a8b5306c526c7f752698548980ad95ffcf8caec9be27c8db4f1a712fe79bca3cfa6ace5f6020c7b8c65203be9557840283880c6ab846822b12db95022ef5a00f1a3e48d70945c5b54a76d9b69020788c38ae4cf96186220d66cf937209bdea32c9540da784afa603638a34ab6459cdc4e789bd9a407288c0696e3ed2eb2e0a2e85b0aad22c006bb99a5ef96f07a105b5078cdbfc32e5fa3f901cad77ad2dcd089b72023c611f5adbfdbd0a48678122b2c6602dce67c5f05dc3b16d19863dd5eccf4bb4a61763ea198f860c6bb154e29cd8499022f38c23da6cb25f68c2775df5dfd209b8e949bcf61be1fa1b9279e6f7226e8d22c345ed0b03beab45e881f843de6daaa2d7ee4a5542a1ebc1104ca3e274c518faa6d22932b5ae5ae746337f2c4da45a15b756ecd74857e16c5179f87758a3a5d5eb3ee487872cbdbc32507ffaec2fb3c349b0e55659f8c66d1a0668a1f13ce1aca4f4da89294f43cc54e125183ab73d9358d87d043a4f519e0c479db854ec444220711def1536da68f15d3800dc4fad5f8ff01645aa4f12e1892609b69f280d14ac34d8485dd87bb659c712c7920e4810bc0f9e15aae01c9b09d128ba7a621b8f5a207a4fc5b1490d5b6ad197be196315dea6814c0737dab5eb6e3fd4c8470bc07577dddf91bcf4600c041d3f86d77d055b4e685e0956372fe3c4128c317808ae8acfa504f1a6e319f3f9efc9fbb8fcb702e016d0de0ddea1ed04df145b88372e8a1295ecdd4403a415344917c8ede18654b3e4670ed7cf16ef3f36988367c2281d2e5cd3d3fe9afb99f357a7cdf4903e0b4a045f5ddd69af03b9ae0d128cbb95b042b6446f402a0b9edc0f115622a93319246a01227dd8c379e9e1f5a5e980fcbb21b3cc1fab7e3839d6849723224ca563e72ae34218f56fc07560bb89e9ba65a6111c29203f5140d7293623f5e8ff175971e923bf368e0bd6d1544b75de08a996de1c05e53e532659f303f20e87099f3f0123ddd9f95dad66292fb8207cb4a3886766ebbb4609c6e3f59cc485721937c0e031773d8b2cfc0111ba25cc62d3b0ea558ef97bb7cde45cb1cdaeff34b56acde4aaa3c2fcee4b9b16abb6292986637cf23dda824c2764dfc2f0ae600f2f4e92742c2472e9b0b5f9f8d02261580fd513788e50196d3f918e4c35166b8c20ac72da2578b4ce1a2d7480eb79165a175483f856081e09225130fcfd8d7abc2f9384fb98f8e65b023a5841bf84d76f1c4f05425720b07d651ff6f9162e9a00ff3853a7f8fb240118d0b1324ddc3bc9f737e4476eb10fffd527c0406f4dea3cad04168b687521e6ad6c473fca2760d695a30c34fb13730302e2ecfcea8f02b372618113e3565436dd5f6df7ab57df53ca29105cf13914b4624e0b9f290c08cedb43949fac113acd2792ecedab3cec9286c56b99298e4fb841"}) connect$inet(0xffffffffffffffff, &(0x7f0000002800)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000002840)=0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002b00)={&(0x7f0000002880)="fe3f45115d0213d31e96", &(0x7f00000028c0)=""/107, &(0x7f0000002940)="6f54bee16749bdba163757f9df5d6a247bd798a6519d2356a0d9678f733baa7b18de161e98e80e266449e7321312193499c93516fdaa0f560f115916b2ebb9a619e7753de9ff176fa2598771b9f67103e9aa65f77f94545e2d9299965c281c66b07bccfabffcb1c308d91bd1cc070382e8a7cc8e79afd8e16e4e81d9a6d25d47cccfd7b64cf24b48575121490909aec776361e914bc77ccccef18f7883af2d8335e00302d36f1636f28ecf7a2cf82d113a3f3351092423c46b5ab2f6c2338155b1c8cd518c0e", &(0x7f0000002a40)="11a124eba9e03755bde9c5dec31757185f4e2a3cbe086fdc8e50772ebeaccab9777a"}, 0x38) 772.913786ms ago: executing program 4 (id=6787): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa687}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 771.88768ms ago: executing program 1 (id=6788): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffd, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @loopback, 0x10000}, 0x1c) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000002c0)={'macsec0\x00', @random="0100061f8145"}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000000)={0x0, r4, 0xfffffffffffffffd, 0x3, 0x4}) 758.005242ms ago: executing program 2 (id=6789): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800) r2 = accept4(r1, &(0x7f00000000c0)=@tipc=@name, &(0x7f0000000140)=0x80, 0x80800) read$rfkill(0xffffffffffffffff, &(0x7f0000000180), 0x8) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000240)={"dc5651cdedc7aed096682804a085cbff", 0x0, 0x0, {0x6, 0xb3d5}, {0x7, 0x3}, 0x3, [0x2, 0x2, 0x4, 0x1000, 0xe, 0x9, 0x5, 0x0, 0x4, 0x401, 0x7, 0x5, 0x5, 0x1b, 0x9, 0xe7]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000003c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f00000007c0)={{r4}, r5, 0x8, @inherit={0x58, &(0x7f0000000340)={0x1, 0x2, 0x7, 0x8224, {0x0, 0x8000000000000001, 0x9, 0x10, 0x2}, [0xa0000000, 0x9]}}, @devid=r6}) r7 = syz_open_procfs$namespace(0x0, &(0x7f00000017c0)='ns/uts\x00') ioctl$FIONCLEX(r7, 0x5450) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000001900)={0x1, 0x0, 0x1000, 0xbc, &(0x7f0000001800)="59db8501f942515bdefbac8615f8bb0d7989d611d47067dfe620631fdafb51be1dae5110348cb3b56f5ebc7b8e4224d0ec9b80f5d69b71acb88f5172c9092408542c6d66a8f51d70e621162a7ed3588e1d7738959cd30c2d473cad202a3fced502ea05aa21ac4b7ef8349f53cad77be1d605c54e3bde44e82ee2b20af4dc23bf06c1b7cf2deaf30587eb450fb40a9d2532127e17cd2dcc068dadd85e10a82c9fac65bc9e66613959bee2579932f3e08bd3c65cfbf80d99d872a89593", 0x1b, 0x0, &(0x7f00000018c0)="9ca501c7cc04ecd66aad951e50b4a6ef1b03bf28413f8485fd2e07"}) r8 = epoll_create1(0x0) r9 = accept4$packet(r2, 0x0, &(0x7f0000001980), 0x100000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f00000019c0)={0x10000001}) r10 = openat$cgroup_procs(r0, &(0x7f0000001a00)='tasks\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000001a40)=0x0) write$cgroup_pid(r10, &(0x7f0000001a80)=r11, 0x12) r12 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(r12, 0x0, 0x60, &(0x7f0000001ac0)={'filter\x00', 0x0, [0xef, 0x1ff, 0x1400]}, &(0x7f0000001b40)=0x44) sendto$l2tp6(r1, &(0x7f0000001b80)="7dd30e748b63b6ecfb1dbae6adc46f085842b9ab404848382f15ab12b52e81f90f476fbdb6652a3fddebb69a701b77ce046a8b64213f0c9dab16ac072e835fbd789844fec32dea4be72db8def4e38cedb8f7c4eb8acb031979b48dc764519485703e0d95b04c2cfdaed514e345ab7c4713fb55624772a94642b14bac5c32027fce51bc9463452b711822f98050ccd16df5b6f5e7a9b4cadeec983a70241df4ccad8d3a43382175c0cbfb5e402ee299924b15dd85a85f78d5cb29f66384b02b7b884888f7259dd3a52568ca3f805cbb13", 0xd0, 0x1, 0x0, 0x0) r13 = accept$inet(r2, &(0x7f0000001cc0)={0x2, 0x0, @dev}, &(0x7f0000001d00)=0x10) sendmsg$nl_generic(r1, &(0x7f0000001e80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001d40)={0xe8, 0x31, 0x200, 0x70bd28, 0x25dfdbfc, {0x1a}, [@typed={0x14, 0x2a, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0x76, 0xf9, 0x0, 0x0, @binary="ae8c8c681544870c63e6ee14ab6d583463df02151162fa518b4c16b2426f838d21218334ab03b65aa2d2fa6b7733c7acce89b0fd15979182bb946bde415dce4fb6c150f991ba4c3b761c9e695e9ead2d4843d24570a33daa584635a5ab15615f5fb000eb2d39e526e656bb79678c466a9cd6"}, @typed={0x8, 0x2f, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x14, 0xe7, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @pid=r11}, @nested={0x4, 0xdc}, @typed={0x4, 0x142}]}, @nested={0x1c, 0x103, 0x0, 0x1, [@nested={0x4, 0x15b}, @nested={0x4, 0x82}, @nested={0x4, 0x13}, @nested={0x4, 0x14e}, @nested={0x4, 0x1}, @nested={0x4, 0x45}]}, @nested={0x10, 0x1f, 0x0, 0x1, [@nested={0x4, 0x68}, @typed={0x8, 0x2f, 0x0, 0x0, @fd=r13}]}]}, 0xe8}}, 0x40000) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001ec0), 0x2, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r10, 0xc0105872, &(0x7f0000001f00)={0x3, 0xd8b}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001f40)={r4}, 0x4) r14 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$EXT4_IOC_SETFSUUID(r14, 0x4008662c, &(0x7f0000001f80)={0x0, 0x0, "fc13628be6752d640e28fb36034e6e1a"}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f00000029c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002980)={&(0x7f0000002740)={0x238, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x30008814}, 0x24048084) 754.596938ms ago: executing program 3 (id=6790): r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) (async) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="140006"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) r4 = socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x14, 0x1a, 0x1, 0x0, 0x0, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) 707.949352ms ago: executing program 4 (id=6791): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="01020200000000001400128009000100766c616e000000000400028008000500", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) r3 = socket(0x40000000015, 0x5, 0x0) r4 = socket$inet6(0xa, 0x1, 0xdffffffb) socket(0x18, 0x6, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000180)=ANY=[], 0x8) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="92000000d575bd4051da000000c868a6f3ff76f0c20f9ad86539a7bea06393258a25305a68025203295200000023bff0b5f60a6ffde8a5442d"], 0x8) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYBLOB="82"], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24040800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000190a0102000000000000000000000000090001030200003000000000"], 0x20}}, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xe73a}, 0x1c) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r9], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x15, &(0x7f00000003c0)=ANY=[@ANYBLOB="85100000000000008510000000000000851000000000000085100000080000008510000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000085100000feffffff1845ffffff00000000000000005ed69839b992be29ff0e2f2426a7075b14c2047656003caedc3509aa7a09fc1074e387c5558d0a7bfc2b16afc9b043fff8998e5c1ddb8d9fe9ca9925a7616e8ec7cab7bc3d7f6df2933270cad81721282f84ec0685f4903942766a21d7346e4fa337f135951a7443aa00d6237e4707765e38998531a9adc497504e8330e48bf95870845d00"/189], &(0x7f0000000780)='GPL\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) 660.84648ms ago: executing program 1 (id=6792): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b00)={0x1c, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0x4}, @nested={0x8, 0x3, 0x0, 0x1, [@generic="cff80291"]}]}, 0x1c}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 628.434095ms ago: executing program 0 (id=6793): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00003ffe39819ca5e9030043e66faa00e7fa91f991b6cda2cd16329839ed0968cbbc2ba92e4316037d24daea76960f58ebc436b945ac378969ea304151200c7c2f63521824d00dadae9eef3d667abbd51bb1a59db6118a13ab29484578318ce5d23c41e4022f8fbd1bd5e8074359d1a669a9bd0b42634f49b647456e9d168002212ac27e68a6f8e7cc1eebf21557aa9127c10549ac0595aac820252433250ca597340d7e74b93a3f09734259319d52c69fd7f3b834e9c5"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x19, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c000000020000000000000001000003"], 0x0, 0x46}, 0x28) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x80000a, 0x11, r3, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x70) r6 = socket(0x40000000015, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) socket$kcm(0x2, 0x922000000001, 0x106) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x5, 0xc2e, 0x10000, 0x100a8, 0xffffffffffffffff, 0x8, '\x00', 0x0, r4, 0x2, 0x3, 0x1, 0xe}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) pipe(&(0x7f0000001700)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x25, &(0x7f0000001780)=r9, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0xfffffffffffffee0, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}}}]}, 0x50}}, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$F2FS_IOC_MOVE_RANGE(r10, 0xc020f509, &(0x7f0000001f80)={r10, 0x1, 0x9, 0xff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r11 = socket$packet(0x11, 0x2, 0x300) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000002900)=r12, 0x4) r13 = socket$packet(0x11, 0x3, 0x300) r14 = socket$packet(0x11, 0x3, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$packet_int(r14, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendto$packet(r14, &(0x7f0000000180)="02033e00d3fc02000000ab5d71b9edd7c9560385dcb188a8", 0xfc9c, 0x2004c8a1, &(0x7f00000001c0)={0x11, 0x0, r15, 0x1, 0x0, 0x6, @broadcast}, 0x14) 624.55324ms ago: executing program 2 (id=6794): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000fe88000000000000000000000000000100000000000000000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000046f5ffffffffffff0900000000000000000a000000000000811d2db20080400000000000000000080000000000000000000000000000000044000500fe8000000000000000000000000000aa000000003c00000000000000ac1e000100000000000000000000000003000000000300000000000000000000000000407afa56a8091490836b519005dcafac04e9253216e3bdffc1b27a351a0e582adf923abbfabf95aa2721c502f2b8aebfbb740925e49000649207242aa7e3043c71a903eb858a1c811753663ea910b67c864bf438f96337e60fdbed3c2dc0d64a96e3fc6c6036fd206335a15fcc05c657869128d622b8e39b2d5b26297827687510b4c788258a24c9b01aca5dfe7f3c66c5af68940b1034dc6310a4bdcd2b3f2c97f71d985e1f9b74cec51157e6854f"], 0xfc}, 0x1, 0x0, 0x0, 0x4044880}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r4, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x4e24, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3c86c0}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000006000000020000002c0084802800018008000100666962001c0002800800024000000001080001400000000008000340000000110900010073797a3000000000090002"], 0x80}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_channels={0x3d, 0x0, 0x2000000, 0x0, 0x4, 0x2, 0x2, 0x2}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000000000)=0xffffff7e, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)=@newtaction={0x268, 0x30, 0x1, 0x70bd2b, 0xfffffefd, {}, [{0x254, 0x1, [@m_csum={0x250, 0x1, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x9, 0x7860, 0xfff}, 0x25}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0xfa, 0x6, 0x1, 0xb}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x330, 0xf6, 0x5, 0x2, 0x4}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x8000, 0x7, 0x10, 0x2}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xa, 0x3, 0x4, 0xffffffff}, 0x5a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x5, 0x0, 0x9}, 0x8}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe717, 0x57, 0x0, 0x4, 0xfffffc01}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x4d9, 0x2, 0x200, 0x9}, 0x3}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x57, 0x8, 0x7, 0xfffffffc, 0x7fffffff}, 0x75}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x3, 0x4, 0x3, 0x2}, 0x12}}]}, {0x10a, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x4084}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @tracing=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) 556.575994ms ago: executing program 1 (id=6795): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00'], 0x3c}}, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000300)="5d119872", 0x4}], 0x1, 0x2) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0xd, 0x3, 0x8, 0x18, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x8000, 0x20, 0x2, 0x7fffffff}}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0xfdef) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000680)=r4}, 0x20) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x1b, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7f78}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x30}, @ldst={0x3, 0x3, 0x2, 0x7, 0xf, 0x0, 0x4}, @exit, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffd}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffc01}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000800)='syzkaller\x00', 0x56d, 0x1000, &(0x7f0000001400)=""/4096, 0x41000, 0x1, '\x00', r3, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x2, 0x8, 0x2, 0x1000}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000880)=[r2, r6, r2, r2, r2, 0xffffffffffffffff, r2, r2], &(0x7f00000008c0)=[{0x3, 0x3, 0xd, 0xb}, {0x5, 0x2, 0x2, 0xa}, {0x1, 0x5, 0xf, 0x1}, {0x3, 0x5, 0xb}, {0x1, 0x4, 0x8, 0xa}, {0x2, 0x4, 0x6, 0x6}], 0x10, 0x8}, 0x94) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl2\x00', r3, 0x2f, 0x8, 0xa, 0x7ad6, 0x19, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x44}, 0x8, 0x40, 0x5, 0x10001}}) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x1}, 0x94) (async) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$alg(0x26, 0x5, 0x0) (async) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b", 0x89}, {&(0x7f0000000b00)}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)}], 0x1, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r11, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r12, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 544.779238ms ago: executing program 3 (id=6796): shutdown(0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x102, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000280)=0x2, 0x4) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000180)={'bond_slave_1\x00', {0x2, 0x4e23, @remote}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) socket(0x400000000010, 0x3, 0x0) (async) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 490.361733ms ago: executing program 4 (id=6797): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) (async, rerun: 64) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) (rerun: 64) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000300), &(0x7f0000000340)=0x4) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) (async, rerun: 32) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffff1}, [@generic={0x91, 0x1, 0x1, 0x8a}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async, rerun: 32) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) (async, rerun: 32) socket$inet(0x2, 0x1, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x88, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x88}}, 0x20000000) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2033}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) (async, rerun: 64) bind$llc(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) socket$inet6(0xa, 0x803, 0x6) (async, rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [], {0x95, 0x0, 0x700}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0xc}, 0x94) 469.694248ms ago: executing program 0 (id=6798): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000240)="a3d11252d03a6a1c14e2e9d4", 0xc}, {&(0x7f0000000280)="ba250057af16468f", 0xfffffca3}], 0x2}, 0x24018080) r1 = socket$netlink(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xfdb5, 0x0, &(0x7f0000000180)="e02742e8680d85ff9782762f86dd", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027bd700000001000040000000c0018000bac0f000aac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 382.004528ms ago: executing program 1 (id=6799): sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="49532a832dbc7dcbf870149a513c77d9ebbcfbbd7000000000006700000008027f00", @ANYRES32=0x0, @ANYBLOB="0c009900080000002700000010001d800c00008005000c0003000000"], 0x38}}, 0x6048004) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000a40)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="0c00ffff00000000000000008900080001000000040022d57d0000000020770d29b480785ef08bbcd3aeb1ac1454b6c4851e99bf27dbc0a1f38cabe2eab1dcbd83533867eb31546a073653982157b3d432d198faffc11605003654a5193b0dc1201e41a2b913aa285bece899d89071fb4b8e0d9f7e94f47eb1e82b2b5a1b50181baf4d12"], 0x48}, 0x1, 0x0, 0x0, 0x20040810}, 0x10004810) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x800, 0x70bd23, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x8}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0xffea, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x9, 0x4, 0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000b00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="200026bd7095620f000000df257200000008b4a75824b9aa596c1cfa05e081b6bf7cdd37c69ec57cdb381f743dd0257319ab59cfa1400ea8627e425e9294a36b451ac049cb301374a035a845eabf53595d35a5c4818d07042a8ea52d79507aa629efe1082e89a731d5882eef262c8b2a74f4ffae609f41ab9551c9", @ANYRES32=0x0, @ANYBLOB="0c009900080000000f000000"], 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000280), &(0x7f00000002c0)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000004f0000000e00010065657464657673696d000000080002006e657464657615af0600000046921ea8c9f716f69d8785013abd1168cf624168b7bd7cbfd7756cc08c6cf432ab8d4518668f005117ac72558bbb8e62303a85dde5999fb8cf1e352d47819907"], 0x34}}, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, r4, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x20040054) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1a, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff000000000000040085000000b5000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) 297.884036ms ago: executing program 4 (id=6800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="b8914b3f67f11008000000000500", 0x0, 0x10012000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r2 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000380)) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x1, 0x80000, @empty, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000029"], 0x18}, 0x1400c0c0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) 276.156204ms ago: executing program 3 (id=6801): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r1, 0x709) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) pipe(&(0x7f0000000040)) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000002500090126bd7008fcffffff020000000c003d80080027004a010100080003004700000010003e80f7"], 0x38}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) 225.497127ms ago: executing program 1 (id=6802): r0 = socket$inet(0x2, 0x800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004180)=@newtaction={0x8c, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x202}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x2, 0x10001, 0x8, 0x34a, {0x0, 0x0, 0x4, 0x3, 0x186}, {0x5, 0x1, 0x6, 0x5, 0x7f, 0x2}, 0xff, 0x2, 0xfffffff8}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 222.764815ms ago: executing program 0 (id=6803): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c00038005000100000000000c00028005000100000000002c00018014000300fe88000000000000000000000000000114000400fe8000000000000000000000000000aa240002800c00028005000100000000001400018008000100ac1e00df070002"], 0xc0}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000800000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000070000000000000002000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240009000f00000000000080000000000000000009000000000000000001000000000000"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x6020400) poll(0x0, 0x0, 0x9) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e24, @broadcast}, 0x10) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000080000009111"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x0, 0xfffffffffffffd1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x50) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000240)=0x0) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="f40100000200000427bd7000fedbdf25fc000000000000000000000000000000ff0200000000000000000000000000014e200fff4e2100fc0200208088000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="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"], 0x1f4}, 0x1, 0x0, 0x0, 0x90}, 0x4) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfd}]}) ioctl$PPPIOCSDEBUG(r7, 0x40047440, &(0x7f00000000c0)=0xfff) write$ppp(r7, &(0x7f0000000140)="1e08", 0x2) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r6, r4, 0x0, r3}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x7c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_FILTER={0x3c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x600}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x3}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x10}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x82}, @CTA_FILTER_ORIG_FLAGS={0x8}]}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x15}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000840}, 0x8000) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) 113.942848ms ago: executing program 3 (id=6804): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00"], 0xfc}}, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) close(0x3) (async) r2 = socket(0x2, 0x80805, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) (async) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x7b, &(0x7f0000000000), 0x8) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff7}, [@call={0x85, 0x0, 0x0, 0x30}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x4e, 0x0, &(0x7f0000000180)="e0b9547ed387dbe9005bec6886dd", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 71.374726ms ago: executing program 0 (id=6805): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e1f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) r1 = socket(0x21, 0x5, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x800, &(0x7f0000000180)={0xa, 0x4e24, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000004240)=0x40000206, 0xfe7a) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, &(0x7f00000000c0)={0xa, 0x1, 0x10000398, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfe}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='illinois', 0x8) shutdown(r4, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000001080012400000ffff11000300686173683a69702c706f727400000000fbb29756f53175a299502b76ea9dd4b6e681a78f965380509124f94ef00fa8a02954660b07ad9312a7b670b01f18c821f99f2b285d3a2fc3fc36dcdc39000000000000000000000000d246af8e20"], 0x60}}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r6 = socket(0x8, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$netlink(r6, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbff, 0x1000000}, 0xc) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10001000}, 0x4040080) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)={'security\x00', 0x0, [0x2, 0xa, 0x0, 0x2, 0x6ab]}, &(0x7f0000000280)=0x54) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) 600.172µs ago: executing program 3 (id=6806): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffff70, &(0x7f0000001440)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffcac, 0xfffffffffffffffd}}, 0x10) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000009500)=@newchain={0x314c, 0x64, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xb}, {0x4, 0xa}, {0x5, 0xffe0}}, [@f_rsvp6={{0xa}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0xb2ec, 0x4, 0x5}, {0x6, 0x9a, 0x74f}, 0x88, 0x7f, 0x8}}]}}, @f_tcindex={{0xc}, {0xcd4, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1}, @TCA_TCINDEX_POLICE={0xca0, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0xa, 0xffffffff, 0xd3, 0x400, 0xffff, 0x200, 0x800, 0x4, 0x100, 0x10, 0x0, 0xb85, 0x800, 0x1, 0x7fffffff, 0x47, 0xfffffffb, 0x6, 0x8, 0x7, 0x2, 0x2, 0x2, 0x0, 0x5, 0x8000, 0x3, 0x8001, 0x6, 0x9, 0x0, 0x9, 0x10001, 0x3, 0x5, 0x5, 0xfff, 0x0, 0x400, 0x1c6, 0x1, 0x5a3d, 0x3, 0x401, 0x10000, 0x40, 0x8, 0x2, 0x100, 0x3, 0x801e, 0x0, 0x8, 0xffff8000, 0x823, 0xeeb, 0x3, 0x9, 0x44a0, 0x8, 0x81, 0x3, 0x1, 0x3, 0x6, 0x401, 0xe04a, 0x1, 0x7f, 0x7ff, 0x8, 0x1, 0x100, 0x9, 0x5d7, 0x78c4, 0x0, 0x36d5, 0x3, 0x9, 0x2b5, 0x9, 0xff, 0x7, 0xffff, 0x8, 0x401, 0x5, 0x8, 0x3, 0x2, 0x54f, 0x3, 0x1, 0x2, 0x2, 0x4, 0x8a, 0x5, 0x2ec4, 0x0, 0x6, 0x3ad97c04, 0x8, 0xfffffe01, 0x16b, 0x1, 0x0, 0x0, 0x4, 0x1, 0x7, 0x0, 0x7, 0x3, 0x2, 0xc, 0x10001, 0xfff, 0x80000000, 0x7fffffff, 0x8, 0x9, 0x3ff, 0x5, 0xc0, 0x2, 0x9, 0xfffff33a, 0xfff, 0xc, 0x7, 0x80000000, 0xff, 0x6, 0x0, 0x5, 0x1, 0x8, 0x1f, 0xa21d, 0x200, 0x1, 0x6, 0x1, 0xe, 0x7, 0xca8, 0x3, 0x1, 0x0, 0x6, 0x8, 0x1000, 0x2, 0x81, 0x5, 0xffffffff, 0x3, 0x1e21, 0x9, 0x7ff, 0x2, 0x77, 0x0, 0x81, 0xd, 0x6, 0x0, 0x40000, 0x903, 0x1, 0x7fff, 0x0, 0x8, 0x9, 0x3, 0xdf, 0xfffffff8, 0x7, 0x1, 0x2, 0x0, 0x200, 0x6118, 0x9, 0x10000, 0x5, 0xa, 0x4, 0x4, 0x2, 0x8000, 0x9cc4, 0x1, 0x8, 0x401, 0x100, 0x1, 0x0, 0x96a, 0x7ff, 0x8000, 0x8001, 0x6, 0x2, 0x6, 0x3, 0x3, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x97a, 0xe69b, 0xfffffc00, 0x2, 0x6, 0x2, 0x3, 0x6, 0x7, 0x10000, 0x3ff, 0x3ff, 0xc64, 0x5, 0x2, 0x400, 0xfffffe00, 0x8, 0x40, 0x4, 0xfd, 0x4, 0x15, 0x8, 0x3, 0x5, 0x5, 0x7fffffff, 0x38000, 0x8, 0x39, 0xd3, 0x93f, 0xffffff55, 0x7fff, 0x1000, 0x9, 0x4, 0x6a, 0x5, 0xc]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x80, 0x8001, 0x7a, 0x7f, 0x1, 0x684d, 0xd, 0x9, 0x8, 0x8, 0x8, 0xeb4c, 0xfffffffa, 0x10000, 0x7, 0xdcc6, 0xffffffff, 0x1418, 0x4, 0xb, 0x4, 0x7, 0x114, 0x9, 0x6, 0x8, 0x7, 0x4, 0xc4e, 0x9, 0x80000001, 0x0, 0x0, 0x2, 0x4a, 0x4, 0xfffffffc, 0x881, 0x9, 0x6, 0x9, 0x0, 0x9, 0x1, 0x1, 0x616, 0x7fff, 0x5, 0x945e, 0x5, 0x3, 0x8, 0x9, 0x5, 0x4, 0xcf50529e, 0x7ff, 0xb, 0x1, 0x8, 0x5, 0x1, 0x800, 0x5, 0xe82e, 0xc5, 0x0, 0xfb9e, 0x9099, 0x7, 0x0, 0x14d53fba, 0x8, 0x4, 0xfffffff2, 0x917, 0x800, 0x8, 0x5, 0x10, 0x0, 0x9, 0x0, 0x73b9, 0x1, 0x8, 0x114, 0x8, 0xff, 0x100, 0x18, 0x8de0, 0xfffffffe, 0x7, 0x9, 0x6, 0x1ff, 0x6, 0xfffffff5, 0x6, 0x1, 0x8, 0x1, 0xfa, 0x8, 0x8, 0x5, 0xffffffff, 0x8, 0x1, 0x2, 0x80, 0x8, 0x2, 0x1, 0x5, 0x2, 0xd, 0x8000, 0x7fffffff, 0x8000, 0x2, 0x5, 0x9, 0x0, 0xffffffff, 0x2, 0x40, 0x7, 0x5fd4, 0x6, 0x81, 0x2, 0x16ec, 0xca4a, 0x4, 0x9, 0xa, 0xb, 0xfffffff7, 0xc9, 0x80000001, 0x2, 0x7fffffff, 0xffff0001, 0xfff, 0x7b4c, 0x4, 0x7, 0x3, 0x6, 0x5, 0x7, 0x1, 0x5, 0x80, 0x48c42035, 0xe23d, 0x4, 0x81, 0x0, 0xdd1, 0xf, 0x1, 0x181, 0xffff, 0x400, 0x7f, 0xffffffff, 0xffff, 0x8fd, 0xf, 0x9, 0x2, 0x3, 0x1, 0x0, 0x8000, 0xbb, 0x5, 0x2, 0x3, 0x0, 0x400, 0x7, 0x10000, 0x8, 0xe, 0xffffce7f, 0x2, 0x8001, 0x9, 0x5db7, 0x8, 0x6, 0x2, 0x2, 0x2000, 0x2e5, 0x6, 0xab5, 0x2, 0xfb, 0x21, 0x4, 0x2, 0x1, 0xfffff050, 0x5, 0x5, 0x7ff, 0x6f, 0x4376, 0x9, 0x7, 0xe0, 0x0, 0x628a, 0x9, 0xffff, 0xfffff82d, 0x1, 0x3, 0x4, 0x400, 0x1ff, 0xfffffeb2, 0x5057, 0x2, 0x8, 0xffffffff, 0x6, 0xc, 0x5, 0xfff, 0x200, 0x9, 0x7f, 0x8001, 0x9, 0x9, 0x5, 0x7000000, 0x2, 0x2, 0x21, 0x655, 0x6, 0xd01, 0x1, 0x4, 0x9, 0x8, 0x95, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x66, 0x2, 0x6, 0x6, 0x3, 0x2f, 0x400, 0x1000, 0x810, 0x6, 0x7, 0x808a, 0xfffffffe, 0x4, 0x2, 0x8, 0xaef, 0x4, 0x3, 0x2, 0xd, 0x2, 0x2, 0x5, 0x2, 0x8, 0x80, 0x1000, 0x0, 0x8000, 0x2, 0x8, 0x4, 0xfffffc26, 0x6, 0x101, 0x7, 0x5, 0x200, 0x3c, 0x1, 0x0, 0x7, 0x0, 0x7, 0x5, 0x8, 0x9, 0x6, 0xffffffff, 0x0, 0x3, 0x80000000, 0x2, 0x5, 0x5, 0x5, 0x3ff, 0x9eb, 0x1, 0x1000, 0x6, 0xf, 0x8, 0x14fd, 0x490f, 0x8, 0x3ff, 0xb08, 0xd60e, 0x5, 0x7, 0x10001, 0x9, 0x4, 0x3, 0x10001, 0x81, 0x8d, 0x0, 0xb27d, 0x0, 0x299b, 0x8, 0x5, 0x657, 0x10, 0x4, 0x3ff, 0xffff26cc, 0x1, 0x100, 0x11, 0x7, 0x9b, 0x5, 0x0, 0x7, 0x400, 0x9, 0xf8, 0x3, 0x6, 0x0, 0xffffe290, 0x9d4e, 0x9, 0xfffffffd, 0xa89, 0x6, 0x400, 0x1, 0x74ffc870, 0x6, 0x5, 0x9, 0x5, 0x80, 0xd2, 0x8, 0x200, 0x9, 0x9, 0xfffffffc, 0x2, 0x6, 0x0, 0xd, 0x8000, 0x9, 0x2, 0x7, 0x800, 0x2, 0x2, 0x2, 0x8001, 0x4, 0x6, 0x3, 0xb1, 0x1e, 0x9, 0x0, 0x6, 0x8, 0x6, 0x7fffffff, 0x32a946ce, 0x4, 0x1, 0x1000, 0x8af7, 0x8, 0x40, 0x0, 0x4, 0x0, 0x2, 0x960, 0x1, 0xa, 0x2, 0x1, 0x7, 0xfffffff8, 0x3, 0x3, 0x6, 0x6, 0x3, 0x0, 0x9, 0x8, 0x8, 0x5, 0xfffffff8, 0x800, 0x800, 0x80, 0x4, 0x7, 0x1, 0x9, 0x101, 0x200, 0x4, 0x7fff, 0x5, 0x5, 0x3ee, 0x2, 0x2, 0x6, 0x0, 0x0, 0x7, 0x1, 0x4, 0x15ae, 0x8, 0x0, 0x1, 0x5, 0x10001, 0x3, 0x81, 0x2, 0x80000001, 0x3ff, 0x6, 0x0, 0x0, 0x1ff, 0x7f, 0x5, 0x7, 0x4, 0xfffffffa, 0x1, 0x9, 0x1, 0xff, 0xffffff27, 0x81, 0x0, 0x800, 0x5, 0x7, 0xb, 0x7ff, 0x5, 0xfffffc96, 0x80000000, 0xde, 0xffff, 0x200, 0x1, 0xfffffffb, 0x4, 0x6, 0x6, 0x61f9, 0x8, 0xb, 0x4, 0x9, 0x6, 0x3, 0xe, 0xd, 0x18000, 0x1, 0xce, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1ff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000000, 0x8, 0x2, 0x0, {0x7, 0x0, 0xffff, 0x6, 0x9, 0xffffff81}, {0x4, 0x2, 0xad, 0x97d0, 0x4, 0xffffff09}, 0x8, 0x10000, 0x46f1}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xe}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x7, 0x2, 0x9, 0x7, {0x3, 0x2, 0x3, 0x8, 0x200, 0x80000000}, {0x7, 0x0, 0x8, 0x7, 0x4, 0x80000001}, 0x7, 0x1, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3d9}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xd9eb}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x1}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xf722}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xdd78}]}}, @f_rsvp6={{0xa}, {0x240c, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_RSVP_SRC={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_RSVP_POLICE={0x444, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x3, 0x2, 0x7, 0xfffffff8, 0x5, 0x8, 0x40000000, 0xabed, 0xfffffffc, 0x40, 0x3ff, 0x2, 0x1, 0xdf1, 0xc, 0x9433, 0xb7, 0x4, 0x2, 0x518c, 0xe56f, 0x7, 0x5, 0x0, 0x5fd41908, 0xa5a0, 0x6, 0xffff, 0x6, 0xb, 0x81, 0xffffffff, 0x6, 0x200, 0xfffffffd, 0x126, 0xff, 0xd, 0x9, 0x7, 0x4, 0x10001, 0xfffff977, 0x80, 0x8, 0xffffffff, 0x1, 0x7, 0x1, 0x2, 0x3, 0x5, 0xfffff001, 0x4, 0xfff, 0x59e, 0xa5c, 0x6, 0x74, 0x9084, 0x3, 0x82ef, 0x6, 0x3, 0x81, 0xffffff81, 0x6, 0xfffffffd, 0x3, 0x4, 0x6, 0x0, 0x5000, 0x8, 0x3, 0x8001, 0xfffffffc, 0x7, 0xd6, 0x19b7, 0x2, 0xffff, 0x2, 0x8, 0x5ddf, 0xc, 0x7, 0x4, 0x78, 0x0, 0x3, 0xffff, 0x200, 0x29b, 0x8, 0x2, 0x0, 0x8, 0xba, 0x5, 0x8, 0x4, 0x46db, 0x0, 0x81, 0x2, 0x1, 0x1, 0x9b27, 0xffffff35, 0x4, 0x6, 0x6a8, 0x800, 0x8, 0x8000, 0x5, 0x9, 0x8, 0x101, 0x2, 0x3, 0x0, 0x6, 0x4, 0x2, 0x0, 0x40b, 0xb1ba, 0x4, 0x1, 0xc2, 0x10000, 0x4, 0x4, 0x81, 0x5, 0x6, 0x8, 0x40, 0x5, 0x6, 0x5, 0x9, 0x0, 0x6, 0xb2, 0x8, 0x8, 0x2, 0x5, 0x5, 0x3, 0x732, 0x6, 0x4, 0x600, 0x67d6, 0x3, 0x3, 0x8, 0x32, 0x0, 0x2, 0xc, 0x8000, 0x1, 0x5, 0x7060, 0x401, 0x9, 0x80000001, 0x234c, 0x4, 0x3, 0x100000, 0x80000001, 0x2, 0xfffffffe, 0x6, 0x0, 0x53, 0x9, 0x9, 0x3, 0x1, 0x6, 0x8, 0x80000000, 0x3ff, 0x3, 0x4, 0xb, 0x0, 0x19bf, 0x9, 0x3, 0x7f, 0xef3, 0x6, 0x3000, 0x0, 0x5, 0x749, 0xf73, 0x7, 0x10001, 0xfffffffb, 0x7, 0x4, 0x9, 0x1, 0x9, 0xfffffe00, 0x5, 0x7fffffff, 0x5, 0x101, 0x8, 0x6, 0xc, 0x4, 0x7a6, 0x5, 0x1, 0x7fff, 0xfffffffb, 0x5, 0x3, 0x3, 0xad, 0x4b4, 0xf, 0xffff8001, 0x4a, 0xcdd, 0x0, 0xf, 0x632e997, 0x6, 0xffffff4f, 0x3, 0x351b800, 0x5, 0x4, 0x9, 0x1, 0x3ff, 0x8, 0x7, 0x6, 0x10, 0x6, 0x3f, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x39e, 0xffffffffffffffff, 0x4, 0x78, 0x0, {0x2, 0x0, 0x1ff, 0x7ff, 0x80, 0x7}, {0x2, 0x2, 0x8, 0x7, 0x8, 0xffff8000}, 0x81, 0x3ec, 0x4}}]}, @TCA_RSVP_ACT={0x1f9c, 0x6, [@m_sample={0x180, 0x5, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xfffffff7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x79}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x80}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4f}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xf}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x101, 0x7, 0x1, 0x10000, 0x18e}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffff81}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0x1e18, 0x1b, 0x0, 0x0, {{0xa}, {0x1dec, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xd0, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x1, 0x10, 0x1, 0x7, 0x52}, 0x8, 0x5, [{0x5, 0x6, 0x8, 0xa, 0x531cbc2, 0x3}]}, [{0x8, 0x70b0ecee, 0x7fffffff, 0x4, 0xc144, 0x4}, {0x0, 0x7, 0x2, 0xd, 0xb27, 0x1ff}, {0x3, 0x4, 0x3ff, 0x3, 0x2, 0x5}, {0x3, 0x5, 0xfffffe01, 0x8, 0xffffffff, 0x7ff}, {0x5e, 0xfffffffd, 0x400, 0x7, 0x26, 0xe6}, {0xf, 0x0, 0x80000000, 0x0, 0x4, 0x1}, {0x80, 0xb, 0xfffffffa, 0x7fffffff, 0x5, 0xfa}, {0x1, 0xed, 0x4532, 0x0, 0x101, 0x2}, {0xa, 0x8, 0x7b5, 0x7fffffff, 0x2, 0x8}, {0x1, 0x13, 0x7, 0x7, 0x5, 0x5}, {0x4, 0x6, 0xfffffff8, 0x8000, 0xff, 0xe1}, {0x1000, 0x7, 0x81, 0x2, 0x0, 0x5}, {0x80000000, 0x6, 0x4, 0x2, 0x9, 0x3}, {0x1, 0x10, 0x6, 0x0, 0x781}, {0x3, 0x9402d38a, 0x1, 0x7, 0x4}, {0xfffffffb, 0x9ff, 0x9, 0x1, 0xfffffff7, 0x6}, {0x8, 0xfa, 0x596fd32f, 0x5, 0x1, 0x8}, {0x2, 0x4, 0x5, 0x3, 0xfffffffa}, {0x129c, 0x896d, 0x4, 0x5, 0x2, 0x4}, {0x6, 0x9, 0x33d7, 0xffffffff, 0x0, 0x4}, {0x5, 0xd279, 0x6, 0x8000, 0x9, 0x400}, {0x9, 0x6, 0x4c5, 0x40, 0xc4, 0x2}, {0xfffff472, 0xff, 0x0, 0xcc, 0xa1d, 0xe52}, {0xfd60, 0xd0, 0x8000, 0x2, 0x5683, 0xffffffff}, {0x80, 0x6aba05be, 0x4, 0x1, 0xfffffffd, 0xb8a8}, {0x7, 0x5, 0x9, 0x7, 0xc, 0x5}, {0x0, 0x4, 0x6b0c89dd, 0x4, 0x5, 0x2}, {0x2, 0xfffffffa, 0xa8f, 0x4, 0xffffffff, 0x5}, {0x3, 0x0, 0x5, 0xae, 0x1, 0x8}, {0x6, 0x6, 0x101, 0x3, 0x1, 0x8}, {0x491, 0x1, 0x7, 0x6, 0x9}, {0x2, 0x1, 0x9, 0x6, 0x5, 0x10001}, {0x3ff, 0x0, 0x9, 0x7f, 0x0, 0x1}, {0x5d36ec66, 0x1000, 0x7fff, 0xfffffffa, 0x9, 0x2}, {0x5, 0x1, 0x1c, 0x9e, 0x3, 0x2}, {0x3b34000, 0x7, 0x858, 0xa, 0xb1, 0x9}, {0x6a, 0x7fff, 0x3, 0xfff, 0x8, 0x1}, {0x400, 0x9, 0x7ff, 0x59f, 0x5, 0x4}, {0x4, 0x9, 0x5, 0x9, 0x2, 0xf6e}, {0x10001, 0xa7a, 0xa76, 0x4, 0x6, 0x1}, {0x8, 0x8, 0x9, 0x5, 0x1, 0x4}, {0x7ff, 0xb1b6, 0x4, 0x876e, 0x7, 0x10000}, {0xfffffffe, 0x80000001, 0x9, 0xfffffffb, 0x79, 0x10001}, {0x10, 0x1, 0x3ff, 0x7000000, 0x5, 0x5}, {0x1000, 0x6, 0x1, 0x4, 0x7, 0x7}, {0x493, 0x1, 0x0, 0x0, 0x6, 0xd}, {0x81, 0x8, 0x4, 0x6, 0x3d71, 0x4}, {0x4, 0x3, 0xffffffff, 0x800, 0x81}, {0x10, 0x2, 0xffffffff, 0x0, 0xa1, 0x5}, {0x6d, 0x3, 0xfffffffa, 0x7f, 0x7, 0xfffffffa}, {0x4, 0x8b, 0x2, 0x400040, 0x0, 0x80000000}, {0x90, 0xf, 0x3, 0x9, 0x81, 0x1}, {0x4, 0x9, 0x59b5, 0x9, 0x771, 0x1}, {0x9a38, 0x8, 0x100, 0x80000001, 0xfffffff9, 0xd10}, {0x6, 0x81, 0x9, 0x8, 0x6, 0x43}, {0x647, 0x2, 0x5, 0xc, 0x10, 0xd}, {0xff, 0xc55, 0x7, 0x0, 0x7, 0x6}, {0x4, 0xfffffffb, 0x1, 0x7195, 0xc, 0x4}, {0xd96, 0xffffffe8, 0x9e9a, 0x3ff, 0xffffffff, 0x6}, {0x4, 0x6, 0x1, 0x8, 0xfffffff5, 0x65af6ea2}, {0x5, 0x6, 0x3, 0xcf, 0x1ff, 0x1}, {0xe0000000, 0x14bc, 0xffff, 0xe, 0x2, 0x64b}, {0x6, 0x3, 0x4, 0xa, 0x2}, {0x5, 0x9, 0xffffffff, 0xa90, 0x6, 0x6}, {0x2, 0xffffffff, 0x8, 0x1, 0x80000000, 0x2}, {0x1, 0x30000000, 0xdaf, 0x9, 0x9, 0xffff0001}, {0x0, 0x3, 0x7, 0x3, 0x8000, 0x5}, {0x3c8, 0xfffffffc, 0x6, 0x6, 0x0, 0x6}, {0x40, 0xd, 0x8, 0x9, 0x0, 0x100}, {0x6, 0x6, 0x81, 0x7, 0x1, 0x9}, {0xc, 0x9, 0xc65, 0x1, 0x3, 0x91}, {0x96, 0x4, 0x1, 0x4c, 0x9, 0x7}, {0x3, 0x7ff, 0x40, 0xe26, 0x8, 0x2}, {0x28c, 0x6, 0x7, 0xdc6, 0x1}, {0x9, 0x2, 0x5, 0xffff, 0x4293, 0x1c}, {0xfffffff7, 0x2, 0x2, 0x6, 0xb3, 0x7ff}, {0x2, 0x9, 0xfffffe01, 0x8, 0x0, 0x9d29}, {0x8, 0x0, 0x2, 0x100, 0x200, 0xfffffffd}, {0x5, 0x9, 0x10001, 0x4d, 0x5, 0x34e8}, {0x400, 0x8, 0x1, 0x9, 0x52b, 0x3}, {0x101, 0xd1, 0x6, 0x64a, 0x80000000, 0x8}, {0x7fff, 0x242, 0xa7aa, 0xd8f, 0x9, 0x9}, {0x6, 0x2, 0x100, 0x1, 0x7, 0x6}, {0x6, 0x1, 0x0, 0x3, 0x5, 0x1}, {0x2, 0x8f, 0x4429, 0xc, 0x10, 0x6}, {0x4, 0x4ff6, 0x3, 0x3, 0x5, 0xff}, {0x1, 0xfffffff8, 0x8001, 0x7fffffff, 0x2, 0x9}, {0x1a, 0x6, 0x6, 0x646, 0x9, 0x7}, {0x4, 0x9bfa, 0x80000000, 0xfffff673, 0x10000, 0x3}, {0x3, 0x200, 0x6, 0xffffffff, 0x0, 0x1}, {0x1, 0x40, 0x7, 0xffffffff, 0x7fffffff, 0x8}, {0x3ff, 0x9f7, 0x7, 0x2, 0x3, 0x3}, {0x5, 0x5, 0x6, 0x875, 0xb}, {0x7, 0xf1e, 0x101, 0x101, 0x80000001, 0x5}, {0x0, 0x1, 0x0, 0x35, 0x2, 0x4a}, {0x2, 0x0, 0xf2a, 0x9, 0x0, 0x400}, {0x6, 0xb0, 0xc, 0x685a, 0x3}, {0x1, 0x4, 0xffff8cb7, 0x6, 0x8, 0xe69}, {0x8, 0x5, 0x2, 0x3, 0x80000000, 0x3}, {0x2, 0x4, 0x6, 0x4, 0x9, 0x4}, {0x1, 0x8, 0x0, 0x5, 0x8, 0x8}, {0x1, 0xfffffff3, 0x2, 0x5, 0x1, 0x3}, {0x7f, 0xed96, 0x1, 0xffff, 0x9, 0x6}, {0x5, 0x80000001, 0x7, 0x7, 0x81, 0x7}, {0x2, 0x6, 0x8, 0x9, 0x1, 0x2}, {0xfffffffd, 0xbdb, 0x3, 0x7fff, 0x5510, 0xdc}, {0x5, 0x0, 0xfffffff4, 0x5, 0x2, 0x400}, {0xff, 0x7fffffff, 0x10, 0xf0, 0x7256bcd0, 0x5b07be69}, {0x7f, 0x7, 0x7, 0x7, 0xd399, 0x2}, {0x800, 0xfffffffc, 0x1ff, 0x14e, 0x7, 0x2}, {0x10001, 0xfffffff3, 0x2, 0x71, 0x80, 0x10}, {0x8, 0x8000, 0x3, 0x7, 0x6, 0x3}, {0x2, 0x7, 0x5, 0x3, 0x2, 0x5}, {0xd, 0x8001, 0xbb, 0x8, 0x3ff, 0x9}, {0x7, 0x76f, 0x6, 0x8, 0x8, 0x2}, {0x3, 0x3, 0x1, 0x4, 0x400, 0xdbcf}, {0x9, 0xe, 0x3, 0x9, 0x7, 0xfffffff8}, {0xfffffffb, 0x542ce2a5, 0x0, 0xe, 0x800, 0x1cae}, {0x28, 0xfffffff7, 0x1, 0x71, 0x0, 0x9}, {0x8, 0x1, 0x3, 0xb3ea, 0x7, 0x4c7}, {0x0, 0x3ff, 0x0, 0x76, 0xd, 0xfff}, {0x8, 0x7, 0x6, 0x3ff, 0x9, 0x613}, {0x1, 0x6, 0x80000000, 0x198a06e2, 0x1, 0xbeef}, {0x0, 0x4, 0x6, 0x2, 0x5, 0x9}, {0x8, 0x7, 0x5, 0xe29, 0x4, 0x5}, {0x7fffffff, 0xfffff800, 0x26, 0x10, 0x6, 0x7}, {0x9, 0x3, 0x7, 0x3, 0x1ff, 0x100}, {0x8000, 0x1, 0x6, 0x200, 0x0, 0x5}], [{0x3}, {0x3}, {0x4}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x5}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x6}, {0x4}, {0x3}, {0x5, 0x1}, {0x1}, {}, {0x3}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x4}, {0x3}, {0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0xb69211de98d92c0a}, {}, {0x2}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0xfdf208e90f90cb8d}, {0x5}, {0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x2}]}}, @TCA_PEDIT_PARMS={0xee0, 0x2, {{{0x200, 0x1, 0x1, 0x7f, 0x63}, 0xf6, 0x5f, [{0x3, 0x10000, 0x4, 0x80000001, 0x77, 0xffffffff}, {0xff, 0x1ff, 0x8001, 0x1002c7cb, 0x10000, 0xfffff217}, {0x80, 0x7, 0x8, 0xfffffffd, 0x10001, 0x100}, {0x9, 0xf15b, 0x2, 0x5, 0x8, 0x6}, {0x4, 0x7, 0x400, 0xfff, 0x9, 0x8001}, {0x5, 0x40, 0x0, 0x60c, 0x5, 0x8}, {0x560, 0x8dc0, 0x1, 0x5, 0x2, 0x3}, {0x6, 0x9, 0x7f, 0x9, 0x8}]}, [{0x95, 0x8, 0x6, 0xc, 0x7fff, 0x8}, {0xfffffffa, 0x8, 0x5, 0x2, 0x9, 0x4}, {0x0, 0x8, 0x3, 0x2, 0x9, 0x2}, {0x2, 0xfff, 0xcb, 0x7, 0xfffffff7, 0x1}, {0x2, 0x3, 0x4, 0x1000, 0xa0, 0xd40}, {0x6a, 0x10000, 0x242, 0x4, 0xffffffff, 0x2}, {0x2, 0x1, 0x8001, 0x5, 0x1, 0xf}, {0xf, 0x6, 0x9, 0x800, 0xfffffffa, 0x1}, {0x6, 0x0, 0x9, 0x6, 0x7, 0x9}, {0x3, 0x3, 0x3, 0x6, 0xfff, 0x5}, {0x57df, 0x8, 0x8000, 0xfffff001, 0x0, 0x610}, {0x1ff, 0x7, 0xc1, 0xd3, 0x80, 0x200}, {0xa, 0xfffffff9, 0x1ff, 0x1, 0x0, 0x10}, {0x3, 0x1ff, 0x3, 0x7, 0x3a5c8187, 0x7fff}, {0x1, 0x1, 0x3, 0x1, 0x4, 0xfffffff1}, {0xd8, 0x800, 0x1, 0x4, 0x1, 0xf9a}, {0x7, 0x1, 0x4, 0x7fffffff, 0x4, 0x1ff}, {0x76db, 0x7, 0x2, 0x3, 0x80000000, 0x1f2}, {0x200, 0x2, 0xd094, 0x1, 0x7, 0xc4ec}, {0x1, 0xfffff92f, 0xc2, 0x1ff, 0x8, 0x3}, {0xb, 0xfffffff7, 0x8, 0x6, 0x5}, {0x7, 0x1f, 0xffffffff, 0x40, 0xa49, 0x3}, {0x3, 0x8, 0xd, 0x50ad0386, 0xfffffff8, 0xa696}, {0x0, 0x3, 0x9, 0x2, 0x7fffffff, 0xc824}, {0x2, 0x716f, 0x497, 0x7ff, 0x1, 0x3}, {0x2, 0xfffffffe, 0x80000000, 0x7, 0x5, 0x7fffffff}, {0x78c, 0x2, 0x9, 0x3, 0x6, 0xf}, {0x8, 0x800, 0xffff, 0xfc, 0x3, 0x7}, {0x6, 0x2, 0x6, 0x2, 0x9}, {0x6, 0x6, 0x80000000, 0x7, 0xcc, 0x9}, {0x326197bb, 0x0, 0x7fff, 0x322, 0x3ff, 0x5}, {0xfffffffe, 0x5, 0x2, 0x9, 0xffff, 0x401}, {0x6, 0x0, 0x5, 0xc93, 0x10000, 0x9}, {0xa, 0xfffffffb, 0x3, 0x5, 0x0, 0x1}, {0x10, 0x8, 0x7, 0x100, 0x6}, {0x4b, 0x900, 0x0, 0x3, 0x7, 0x10000}, {0x30000000, 0x5, 0x7, 0x9, 0x20a1, 0x6}, {0x0, 0x0, 0x2, 0x8a6, 0x5, 0xffffffff}, {0x6, 0x551c14d2, 0x3, 0x10000, 0x508, 0x7}, {0x1, 0xa7, 0x8, 0x9, 0x4, 0x7}, {0x80, 0x0, 0x8, 0x401, 0x7a6, 0x9e}, {0x4, 0x800, 0x0, 0x51, 0xe, 0x68}, {0x3, 0x54, 0x7f, 0x800, 0x80000001, 0x7}, {0x594167d5, 0x1, 0xb, 0x8, 0x9, 0xc5}, {0x0, 0x7fffffff, 0x0, 0x22, 0x0, 0x764}, {0x6, 0x7, 0x0, 0x7, 0x80000001, 0xb}, {0x8001, 0x8, 0x5, 0x4, 0x6, 0xe0000000}, {0x8, 0x9, 0x1, 0xe, 0x1, 0x1}, {0x5, 0x0, 0x0, 0x5, 0x80000001, 0x5}, {0x6, 0x3078, 0x6, 0x8, 0x2, 0xd6}, {0x40, 0x43b7bec8, 0x80000000, 0xffffff39, 0x2}, {0xe, 0x9c6, 0xa71, 0x4}, {0x1, 0x4aac, 0x9, 0x2, 0x2, 0x8}, {0x3ff, 0x101, 0x10000, 0x1000, 0x3, 0x3}, {0x16c4, 0x2, 0x8, 0xe, 0x8, 0x1}, {0x0, 0x2, 0x3, 0x6, 0xffff, 0x80000001}, {0x9, 0x2, 0x0, 0x6, 0x5, 0x33b}, {0x2, 0x7, 0x8, 0x7, 0x6, 0x9}, {0x8, 0xe, 0x2, 0xff, 0x3}, {0x9, 0x2, 0x6, 0x6, 0x8a9, 0x4}, {0x15f7, 0x5, 0xffffffff, 0x3, 0x90ffe0cc, 0x6}, {0x3, 0x9, 0x7, 0x4, 0x6, 0x7}, {0x7, 0x8, 0xf1f, 0x3, 0x2}, {0x2, 0x3, 0x80000001, 0x8, 0x9, 0x1}, {0xade, 0x7, 0x6, 0x3b, 0xffffffff, 0x6}, {0x5, 0x1, 0x0, 0x80000000, 0x0, 0x8000}, {0x7, 0xfffffff8, 0x0, 0x10000, 0x3ff, 0x1000}, {0x9, 0x19692716, 0x3, 0xa00, 0x8, 0x4f34}, {0x9, 0x3, 0x5, 0x1, 0x800, 0x8000}, {0x4, 0xfff, 0xc01, 0x5b2, 0x8, 0x6}, {0x60000000, 0x10001, 0x5, 0x4, 0x3, 0x8000}, {0x0, 0xffffff2a, 0x0, 0x5, 0x8, 0x2}, {0xf, 0xa8d4, 0x8, 0x9, 0x7, 0x10000}, {0x8, 0x2, 0x6, 0x8000, 0x83b1, 0x1}, {0x40, 0xa, 0x3ff, 0xef, 0xc, 0x11}, {0x0, 0x3ff, 0x1, 0x10001, 0x8, 0x80}, {0x6c, 0x9, 0x10001, 0x7fff, 0xc9d, 0x3}, {0x2, 0x5, 0x7fff, 0x7, 0x0, 0x2}, {0x1, 0xffffffc9, 0x2, 0xfffffff7, 0x8, 0x6}, {0x7, 0xb047, 0x2, 0x7, 0x200, 0x3}, {0x3, 0x8, 0xf, 0x8, 0x7, 0x10}, {0x1, 0x1000, 0x5, 0x4, 0x6, 0xffffff23}, {0x5, 0x0, 0x0, 0x5, 0x1}, {0x814, 0x2, 0x4, 0x9, 0x2000, 0xb}, {0x8, 0x8, 0x5, 0x5, 0x22dd, 0x10}, {0x6, 0x4, 0x6, 0x1, 0x86, 0x8}, {0x7fff, 0x4, 0x7fff, 0x5, 0x984e, 0x9}, {0x1ff, 0x0, 0xd, 0x7, 0x1ff, 0x186d}, {0x4, 0x6, 0x5, 0x8, 0x3, 0x1c2}, {0x5, 0x2, 0x6, 0x1000, 0x7, 0x4cc}, {0x101, 0x4, 0x101, 0x4, 0x7, 0x800}, {0x2, 0x2, 0xffffffff, 0x8, 0x3, 0x6}, {0x5, 0x9, 0x200, 0x8, 0xbc0, 0x8000}, {0x8, 0x85c1, 0x4, 0x80000000, 0x4, 0x3}, {0x1ff, 0xfffffff7, 0x8, 0xffff, 0xb5, 0x6}, {0x0, 0x0, 0x5, 0xa, 0x10001, 0x40e3}, {0x40, 0x0, 0xfffffffc, 0x8, 0x8, 0xfffffff9}, {0x81, 0x1, 0x1, 0x8, 0x1, 0xfffffff8}, {0xe, 0x8, 0x8, 0xf01d, 0x1, 0x1}, {0x4b6cdee9, 0x10000, 0x101, 0x200, 0x6, 0x5}, {0x2, 0x9, 0x4, 0x4, 0x2}, {0x6, 0x8, 0x7fff, 0x80, 0xf, 0x140}, {0x400, 0x1, 0x717, 0xffffffff, 0x15, 0x1ff}, {0x6, 0xc0, 0x3, 0x6, 0x1, 0x5}, {0x8, 0x5, 0x7, 0xfffffc2c, 0x97, 0x4}, {0x8, 0x81, 0xfffffffc, 0x7544, 0x2, 0x6}, {0xb97, 0xf, 0x7f, 0x2, 0x6, 0x7}, {0x100, 0x2, 0x502, 0x3, 0x9, 0x3}, {0x57f, 0xff, 0x3, 0x579, 0x1, 0x5}, {0x4284, 0x4, 0x7, 0xfffffff0, 0x1000, 0x4}, {0x7, 0x10001, 0x800, 0x8, 0x4, 0x5}, {0x1ff, 0x100, 0x3, 0x5, 0x5, 0x3}, {0x5, 0x3ff, 0x3ff, 0xff2, 0x9, 0x1}, {0x1, 0x4, 0x7f, 0x40, 0x1, 0x2}, {0x1, 0xbc, 0x5, 0x100, 0x0, 0x2}, {0x4, 0x2ad, 0x1, 0xf, 0x9, 0x6}, {0xd, 0x0, 0x1, 0x7, 0xffffffff, 0xff}, {0x2, 0xfffffff7, 0x10001, 0xfff, 0x6, 0x2}, {0x7, 0x81, 0x8, 0x200, 0x7, 0xcb3}, {0x4, 0x0, 0xfffeffff, 0xa9, 0x9c44, 0x2}, {0x8, 0x7fff, 0x5, 0x5, 0x5, 0x54d1}, {0x0, 0x101, 0x1, 0x100, 0x4, 0x8}, {0x3, 0x6, 0x6, 0x4, 0x5, 0x4}, {0x0, 0x1000, 0x5, 0x3, 0x1, 0xb}, {0xff, 0x8001, 0x6, 0x80000001, 0x5, 0x6}, {0x1, 0x4, 0x6, 0x4, 0xc958, 0xfffffff9}, {0x7, 0x21, 0x7fff, 0x8, 0x6, 0x8001}, {0x5, 0x10000, 0x1, 0x1ff, 0x7, 0x8}], [{0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x2}, {0x3}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x2}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0xb41e9784abfa9de1}, {0x3}, {0x1, 0x1}, {0x3}, {0x2}, {0x5}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x4}, {0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x441a2383c079a7fb, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x4}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {}, {}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x5c42497e39683eb}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x314c}}, 0xc0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async, rerun: 64) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) (async) writev(r2, &(0x7f0000000380)=[{&(0x7f00000011c0)="c8", 0x1}], 0x1) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 0s ago: executing program 1 (id=6807): r0 = socket(0x10, 0x803, 0x0) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000080)=')\'(\x00', 0x2e0a81, &(0x7f00000000c0)={@_ha_fsid={[0x4]}, {0x3, 0x1, 0x1, 0x6}}, 0x9, &(0x7f0000000100), &(0x7f0000000140)=0xfffffff9}) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x4, [@restrict={0xf, 0x0, 0x0, 0xb, 0x3}, @fwd={0xd}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x2}, @union={0xe, 0x4, 0x0, 0x5, 0x0, 0x40, [{0xc, 0x1, 0xfffffffb}, {0x10, 0x0, 0x10}, {0x4, 0x5, 0x3ff}, {0x0, 0x4, 0x3fa}]}]}, {0x0, [0x30, 0x30]}}, &(0x7f0000000380)=""/89, 0x7c, 0x59, 0x1, 0x7f}, 0x28) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) (async) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r5, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000600)={r0, &(0x7f0000000500)='\'\xb5^\x00', 0x200181, &(0x7f0000000540)={@align=0x29b2, {0x7f, 0x1, 0xc, 0x4}}, 0x955, &(0x7f0000000580), &(0x7f00000005c0)=0xb94d}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x1d, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffff00}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_fd={0x18, 0x6, 0x1, 0x0, r2}, @exit, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x10}, @jmp={0x5, 0x0, 0x0, 0x9, 0x3, 0xfffffffffffffffe, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000440)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x10, 0xfffffff9, 0x3ff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000680)=[r4, r5, r6, r7, r8], &(0x7f00000006c0)=[{0x1, 0x5, 0x3, 0x2}, {0x3, 0x3, 0x5, 0x5}, {0x0, 0x4, 0x4, 0xb}], 0x10, 0x584}, 0x94) kernel console output (not intermixed with test programs): tes in process `syz.1.5564'. [ 605.646821][T25523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.658627][T27525] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 605.926025][T27541] openvswitch: netlink: Flow actions attr not present in new flow. [ 606.216535][T25509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.685255][T25523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.896340][T27574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.315925][T27603] wg1 speed is unknown, defaulting to 1000 [ 607.448903][T27619] validate_nla: 1 callbacks suppressed [ 607.448922][T27619] netlink: 'syz.2.5597': attribute type 31 has an invalid length. [ 607.539776][T27619] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 607.547354][T27619] syzkaller1: linktype set to 778 [ 607.612743][T27619] 8021q: adding VLAN 0 to HW filter on device bond13 [ 607.629857][T27603] lo speed is unknown, defaulting to 1000 [ 607.725980][T25523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.861757][T27632] wg1 speed is unknown, defaulting to 1000 [ 608.246118][T27658] netlink: 'syz.2.5610': attribute type 4 has an invalid length. [ 608.259788][T27657] netlink: 'syz.2.5610': attribute type 4 has an invalid length. [ 608.279884][T27657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 608.343258][T27632] lo speed is unknown, defaulting to 1000 [ 608.399779][T27651] wg1 speed is unknown, defaulting to 1000 [ 608.766658][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.923519][T27651] lo speed is unknown, defaulting to 1000 [ 609.250375][ T8960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.268565][T27697] netlink: 'syz.3.5619': attribute type 1 has an invalid length. [ 609.401293][T27697] bond9: entered promiscuous mode [ 609.407357][T27697] 8021q: adding VLAN 0 to HW filter on device bond9 [ 609.461194][T27689] wg1 speed is unknown, defaulting to 1000 [ 609.639234][T27711] : entered promiscuous mode [ 609.650036][T27718] __nla_validate_parse: 29 callbacks suppressed [ 609.650055][T27718] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5624'. [ 609.806733][T25523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.999697][T27730] team0 (unregistering): Port device batadv1 removed [ 610.100776][T27689] lo speed is unknown, defaulting to 1000 [ 610.372019][T27756] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5631'. [ 610.543683][T27765] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 610.629262][T27765] bond10: (slave lo): Enslaving as an active interface with an up link [ 610.639966][T27765] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 610.662562][T27758] ip6gretap2: entered promiscuous mode [ 610.848646][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.030226][T27793] ipvlan2: entered promiscuous mode [ 611.101000][T27798] netlink: 'syz.0.5645': attribute type 6 has an invalid length. [ 611.176992][T27802] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5647'. [ 611.197603][T27803] netlink: 'syz.1.5646': attribute type 1 has an invalid length. [ 611.214644][T27803] netlink: 'syz.1.5646': attribute type 2 has an invalid length. [ 611.388466][T27813] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5646'. [ 611.416263][T27813] openvswitch: netlink: Flow actions attr not present in new flow. [ 611.578017][T27824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.970051][T27834] netlink: 'syz.0.5655': attribute type 83 has an invalid length. [ 611.999434][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.004212][T27834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 612.167094][T27839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.176074][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.205281][T27845] netlink: 'syz.4.5659': attribute type 11 has an invalid length. [ 612.247481][T27847] netlink: 'syz.3.5656': attribute type 10 has an invalid length. [ 612.255768][T27847] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5656'. [ 612.256053][T27845] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 612.280020][T27847] hsr0: entered promiscuous mode [ 612.285777][T25507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.315472][T27847] bridge0: port 3(hsr0) entered blocking state [ 612.333416][T27847] bridge0: port 3(hsr0) entered disabled state [ 612.346732][T27847] hsr0: entered allmulticast mode [ 612.356084][T27847] hsr_slave_0: entered allmulticast mode [ 612.362854][T27847] hsr_slave_1: entered allmulticast mode [ 612.380177][T27849] wg1 speed is unknown, defaulting to 1000 [ 612.587537][T27861] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5664'. [ 612.617670][T27861] vlan4: entered promiscuous mode [ 612.622754][T27861] geneve1: entered promiscuous mode [ 612.806404][T27873] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5667'. [ 612.917407][T27875] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5668'. [ 612.971712][T27877] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5669'. [ 613.007336][T25523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.015497][T25523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.025526][T27882] sctp_getsockopt_maxseg: 23 callbacks suppressed [ 613.025546][T27882] sctp: [Deprecated]: syz.0.5669 (pid 27882) Use of int in maxseg socket option. [ 613.025546][T27882] Use struct sctp_assoc_value instead [ 613.056108][T27879] erspan0: left promiscuous mode [ 613.070345][T27883] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5669'. [ 613.137316][T27879] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.159528][T27849] lo speed is unknown, defaulting to 1000 [ 613.519987][T27909] x_tables: ip_tables: ah match: only valid for protocol 51 [ 615.397639][T27928] xt_hashlimit: max too large, truncated to 1048576 [ 615.452362][T27930] netlink: 'syz.4.5683': attribute type 13 has an invalid length. [ 615.555152][T27938] __nla_validate_parse: 3 callbacks suppressed [ 615.555169][T27938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5685'. [ 615.662753][T27944] syzkaller0: entered allmulticast mode [ 615.678739][T27944] syzkaller0 (unregistering): left allmulticast mode [ 615.827459][T27951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5687'. [ 615.848268][T27953] bond0: (slave veth0_to_hsr): Device is not bonding slave [ 615.861094][T27953] bond0: option active_slave: invalid value (veth0_to_hsr) [ 615.907886][T27951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5687'. [ 616.012472][T27968] geneve4: entered promiscuous mode [ 616.041644][T23184] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 616.059485][T23184] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 616.092491][T23184] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 616.128691][T27951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5687'. [ 616.139714][ T10] net_ratelimit: 6 callbacks suppressed [ 616.139727][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.191046][T23184] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 616.216809][T27977] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5695'. [ 616.233098][T27968] sctp: [Deprecated]: syz.1.5693 (pid 27968) Use of struct sctp_assoc_value in delayed_ack socket option. [ 616.233098][T27968] Use struct sctp_sack_info instead [ 616.245571][T27980] netlink: 'syz.2.5696': attribute type 1 has an invalid length. [ 616.362153][T27994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5699'. [ 616.437566][T27994] bond11: entered promiscuous mode [ 616.443156][T27994] bond11: entered allmulticast mode [ 616.452285][T27994] 8021q: adding VLAN 0 to HW filter on device bond11 [ 616.674908][T28015] openvswitch: netlink: Geneve opt len 13 is not a multiple of 4. [ 616.718493][T28011] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 616.750552][ T8960] lo speed is unknown, defaulting to 1000 [ 616.764583][ T8960] syz2: Port: 1 Link ACTIVE [ 616.837166][T28027] tipc: Enabling of bearer rejected, failed to enable media [ 616.872521][T28027] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5706'. [ 617.076452][T28041] netlink: 'syz.3.5708': attribute type 10 has an invalid length. [ 617.166377][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.337148][T28035] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 617.380899][T28041] hsr0: left allmulticast mode [ 617.386051][T28041] hsr_slave_0: left allmulticast mode [ 617.391801][T28041] hsr_slave_1: left allmulticast mode [ 617.399361][T28041] hsr0: left promiscuous mode [ 617.406980][T28041] bridge0: port 3(hsr0) entered disabled state [ 617.576873][T28045] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5708'. [ 617.587314][T28057] syzkaller0: entered promiscuous mode [ 617.592929][T28057] syzkaller0: entered allmulticast mode [ 617.796590][T28075] netlink: 'syz.2.5715': attribute type 298 has an invalid length. [ 617.822568][T28075] netlink: 'syz.2.5715': attribute type 10 has an invalid length. [ 617.913778][T28082] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004 [ 618.034004][T28061] xt_TCPMSS: Only works on TCP SYN packets [ 618.058372][T28059] lec:lec_atm_close: lec0: Shut down! [ 618.205324][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.323734][T28103] netlink: 204 bytes leftover after parsing attributes in process `syz.4.5723'. [ 618.362360][T28103] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5723'. [ 618.372429][T25507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.430748][T28108] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 618.657561][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 618.668048][ T5816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 618.680520][T28108] bond12: Unable to set down delay as MII monitoring is disabled [ 618.681068][ T5816] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 618.713036][ T5816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 618.722060][ T5816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 618.779101][T28118] netlink: set zone limit has 4 unknown bytes [ 618.789972][T28108] bond12 (unregistering): Released all slaves [ 618.911648][T28123] wg1 speed is unknown, defaulting to 1000 [ 619.246501][T25523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.406412][T25507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.536257][T28123] lo speed is unknown, defaulting to 1000 [ 619.540375][T28115] wg1 speed is unknown, defaulting to 1000 [ 619.914067][T28115] lo speed is unknown, defaulting to 1000 [ 619.940369][T28123] chnl_net:caif_netlink_parms(): no params data found [ 620.058821][T28173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.214233][T28167] wg1 speed is unknown, defaulting to 1000 [ 620.242995][T28123] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.254687][T28123] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.262199][T28123] bridge_slave_0: entered allmulticast mode [ 620.276267][T28123] bridge_slave_0: entered promiscuous mode [ 620.303777][T28123] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.322980][T28123] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.332424][T28123] bridge_slave_1: entered allmulticast mode [ 620.340551][T28123] bridge_slave_1: entered promiscuous mode [ 620.486322][T28123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.542520][T28123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.584793][T28203] __nla_validate_parse: 6 callbacks suppressed [ 620.584810][T28203] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5745'. [ 620.600072][T28123] team0: Port device team_slave_0 added [ 620.602793][T28123] team0: Port device team_slave_1 added [ 620.627292][T28205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5746'. [ 620.668396][T28123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.681253][T28123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.707739][T28123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.730749][T28167] lo speed is unknown, defaulting to 1000 [ 620.739389][T28123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.754635][T28123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.780665][ T5816] Bluetooth: hci4: command tx timeout [ 620.801703][T28123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.939887][T28216] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5748'. [ 621.008461][T28123] hsr_slave_0: entered promiscuous mode [ 621.016541][T28123] hsr_slave_1: entered promiscuous mode [ 621.022979][T28123] debugfs: 'hsr0' already exists in 'hsr' [ 621.028881][T28123] Cannot create hsr debugfs directory [ 621.335688][T25523] net_ratelimit: 2 callbacks suppressed [ 621.335707][T25523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.406826][T25507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.506716][T28226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.515900][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.591550][T28228] wg1 speed is unknown, defaulting to 1000 [ 621.757241][T28241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5755'. [ 621.920344][T28123] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 621.933814][T28247] netlink: 'syz.0.5757': attribute type 1 has an invalid length. [ 621.947993][T28123] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 621.967431][T28228] lo speed is unknown, defaulting to 1000 [ 621.967804][T28123] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 622.014615][T28123] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 622.043708][T28248] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 622.055290][T28248] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 622.079655][T28253] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 622.091464][T28253] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 622.199748][T28251] wg1 speed is unknown, defaulting to 1000 [ 622.338753][T28123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.353007][T28268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5760'. [ 622.364003][T28268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5760'. [ 622.376218][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.523946][T28123] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.562607][T23186] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.569908][T23186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.612123][T23186] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.619631][T23186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.716746][T28251] lo speed is unknown, defaulting to 1000 [ 622.720930][T28123] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 622.771490][T28123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 622.813580][T28278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5763'. [ 622.845001][ T5816] Bluetooth: hci4: command tx timeout [ 623.014808][T28291] xt_CT: You must specify a L4 protocol and not use inversions on it [ 623.014808][T28294] xt_CT: You must specify a L4 protocol and not use inversions on it [ 623.094476][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 623.102661][ C0] lec:lec_tx_timeout: lec0 [ 623.405089][T25523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.639430][T28305] netlink: 428 bytes leftover after parsing attributes in process `syz.1.5768'. [ 623.712230][T28305] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5768'. [ 623.870158][T28309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5769'. [ 624.020744][T28123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.341710][T28330] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004 [ 624.447859][T25523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.456049][ T8960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.498255][T28123] veth0_vlan: entered promiscuous mode [ 624.518714][T28123] veth1_vlan: entered promiscuous mode [ 624.532001][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 624.535048][ T8960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.547229][T25509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.591718][T28123] veth0_macvtap: entered promiscuous mode [ 624.603394][T28123] veth1_macvtap: entered promiscuous mode [ 624.635643][T28123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.655727][T28123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.670263][T28345] netlink: 'syz.2.5779': attribute type 142 has an invalid length. [ 624.672731][T23186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.703196][T23186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.718496][T23186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.750307][T23186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.933102][ T5816] Bluetooth: hci4: command tx timeout [ 624.992307][T28355] netlink: 'syz.2.5783': attribute type 2 has an invalid length. [ 626.539048][ T10] net_ratelimit: 1 callbacks suppressed [ 626.539061][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.005592][ T5816] Bluetooth: hci4: command tx timeout [ 627.031420][ T30] audit: type=1800 audit(1771147006.638:10): pid=28377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5788" name="3" dev="tmpfs" ino=2946 res=0 errno=0 [ 627.124516][T23193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.148206][T23193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.261228][T23182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.282609][T23182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.291986][T28393] __nla_validate_parse: 3 callbacks suppressed [ 627.292006][T28393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5794'. [ 627.321351][T28393] 8021q: VLANs not supported on vxcan1 [ 627.349980][T28397] dummy0: entered promiscuous mode [ 627.370755][T28397] macsec2: entered allmulticast mode [ 627.387975][T28397] dummy0: entered allmulticast mode [ 627.405832][T28397] dummy0: left allmulticast mode [ 627.424841][T28397] dummy0: left promiscuous mode [ 627.463813][T28404] netlink: 'syz.1.5798': attribute type 28 has an invalid length. [ 627.566061][T25509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.574664][ T8951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.624748][T28404] dvmrp1: entered allmulticast mode [ 627.683048][T28418] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 627.893432][T28423] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5804'. [ 628.056176][T28433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5807'. [ 628.092432][T28433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5807'. [ 628.173030][T28438] netlink: 'syz.2.5807': attribute type 10 has an invalid length. [ 628.215106][T28438] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5807'. [ 628.443669][T28449] tun0: tun_chr_ioctl cmd 1074025672 [ 628.452633][T28449] tun0: ignored: set checksum disabled [ 628.528508][T28455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5813'. [ 628.605200][ T8951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.723430][ T30] audit: type=1800 audit(1771147008.328:11): pid=28464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5815" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2956 res=0 errno=0 [ 628.942552][T28475] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5815'. [ 629.022234][T28483] FAULT_INJECTION: forcing a failure. [ 629.022234][T28483] name failslab, interval 1, probability 0, space 0, times 0 [ 629.035307][T28483] CPU: 1 UID: 0 PID: 28483 Comm: syz.0.5820 Not tainted syzkaller #0 PREEMPT(full) [ 629.035345][T28483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 629.035363][T28483] Call Trace: [ 629.035370][T28483] [ 629.035377][T28483] dump_stack_lvl+0xe8/0x150 [ 629.035415][T28483] should_fail_ex+0x412/0x560 [ 629.035440][T28483] should_failslab+0xa8/0x100 [ 629.035463][T28483] __kmalloc_noprof+0xe8/0x760 [ 629.035481][T28483] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 629.035507][T28483] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 629.035531][T28483] genl_family_rcv_msg_doit+0xd9/0x330 [ 629.035549][T28483] ? __asan_memcpy+0x40/0x70 [ 629.035569][T28483] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 629.035595][T28483] ? apparmor_capable+0x137/0x1a0 [ 629.035612][T28483] ? bpf_lsm_capable+0x9/0x20 [ 629.035628][T28483] ? security_capable+0x7e/0x2c0 [ 629.035660][T28483] genl_rcv_msg+0x61c/0x7a0 [ 629.035685][T28483] ? __pfx_genl_rcv_msg+0x10/0x10 [ 629.035703][T28483] ? __pfx_ethnl_act_module_fw_flash+0x10/0x10 [ 629.035739][T28483] ? __pfx_ref_tracker_free+0x10/0x10 [ 629.035767][T28483] netlink_rcv_skb+0x232/0x4b0 [ 629.035784][T28483] ? __pfx_genl_rcv_msg+0x10/0x10 [ 629.035804][T28483] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 629.035817][T28483] ? genl_rcv+0x19/0x40 [ 629.035850][T28483] ? down_read+0x272/0x2e0 [ 629.035869][T28483] ? genl_rcv+0xd/0x40 [ 629.035888][T28483] genl_rcv+0x28/0x40 [ 629.035904][T28483] netlink_unicast+0x80f/0x9b0 [ 629.035930][T28483] ? __pfx_netlink_unicast+0x10/0x10 [ 629.035950][T28483] ? netlink_sendmsg+0x650/0xb40 [ 629.035962][T28483] ? skb_put+0x11b/0x210 [ 629.035979][T28483] netlink_sendmsg+0x813/0xb40 [ 629.036000][T28483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 629.036017][T28483] ? aa_sock_msg_perm+0xf1/0x1b0 [ 629.036035][T28483] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 629.036055][T28483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 629.036066][T28483] ____sys_sendmsg+0xa68/0xad0 [ 629.036083][T28483] ? __might_fault+0xaf/0x130 [ 629.036104][T28483] ? __pfx_____sys_sendmsg+0x10/0x10 [ 629.036128][T28483] ? import_iovec+0x73/0xa0 [ 629.036145][T28483] ___sys_sendmsg+0x2a5/0x360 [ 629.036160][T28483] ? __lock_acquire+0x6b5/0x2cf0 [ 629.036178][T28483] ? __pfx____sys_sendmsg+0x10/0x10 [ 629.036225][T28483] ? __fget_files+0x2a/0x420 [ 629.036238][T28483] ? __fget_files+0x3a0/0x420 [ 629.036260][T28483] __x64_sys_sendmsg+0x1bd/0x2a0 [ 629.036280][T28483] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 629.036304][T28483] ? __pfx_ksys_write+0x10/0x10 [ 629.036331][T28483] do_syscall_64+0x14d/0xf80 [ 629.036348][T28483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.036360][T28483] ? trace_irq_disable+0x37/0x100 [ 629.036375][T28483] ? clear_bhb_loop+0x40/0x90 [ 629.036392][T28483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.036413][T28483] RIP: 0033:0x7ffaf3b9bf79 [ 629.036429][T28483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.036441][T28483] RSP: 002b:00007ffaf4976028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 629.036457][T28483] RAX: ffffffffffffffda RBX: 00007ffaf3e15fa0 RCX: 00007ffaf3b9bf79 [ 629.036467][T28483] RDX: 0000000000000000 RSI: 0000200000002540 RDI: 0000000000000003 [ 629.036476][T28483] RBP: 00007ffaf4976090 R08: 0000000000000000 R09: 0000000000000000 [ 629.036485][T28483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.036492][T28483] R13: 00007ffaf3e16038 R14: 00007ffaf3e15fa0 R15: 00007ffc72f35368 [ 629.036517][T28483] [ 629.535985][T28492] netlink: 'syz.3.5823': attribute type 2 has an invalid length. [ 629.590341][T28493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5822'. [ 629.685989][T28499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.719024][T28499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.737578][T28499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.757217][T28499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.766755][T28499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.784755][T28499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.044547][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5510 ms [ 630.052676][ C0] lec:lec_tx_timeout: lec0 [ 631.735112][ T8951] net_ratelimit: 1020 callbacks suppressed [ 631.735133][ T8951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.831693][T28517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5828'. [ 631.899025][T28519] dummy0: entered promiscuous mode [ 631.911190][T28519] macsec2: entered allmulticast mode [ 631.945890][T28519] dummy0: entered allmulticast mode [ 632.040124][T28535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 632.114159][T28537] syzkaller0: entered promiscuous mode [ 632.126381][T28537] syzkaller0: entered allmulticast mode [ 632.140630][T28541] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5835'. [ 632.361385][T28554] syzkaller0: entered promiscuous mode [ 632.387963][T28554] syzkaller0: entered allmulticast mode [ 632.421329][T28550] udevd[28550]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 632.431710][T28563] __nla_validate_parse: 2 callbacks suppressed [ 632.431727][T28563] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5841'. [ 632.467659][T28550] udevd[28550]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 632.499888][T28554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5839'. [ 632.712612][T28578] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5848'. [ 632.771800][ T8951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.781433][T28576] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 632.940683][T28595] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5852'. [ 632.984239][T28601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5853'. [ 633.193935][T28611] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5856'. [ 633.199111][T28612] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 633.215408][T28612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.228695][T28617] netlink: 'syz.2.5857': attribute type 20 has an invalid length. [ 633.235900][T28611] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5856'. [ 633.271276][T28619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5858'. [ 633.281735][T28619] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5858'. [ 633.421863][T28626] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5862'. [ 633.537804][T28637] x_tables: ip_tables: ah match: only valid for protocol 51 [ 633.646907][T25509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.794867][T28646] wg1 speed is unknown, defaulting to 1000 [ 633.854026][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.127492][T25509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.287694][T28646] lo speed is unknown, defaulting to 1000 [ 634.438183][T28682] x_tables: duplicate underflow at hook 3 [ 634.680838][T28694] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 634.713323][T28704] x_tables: ip_tables: ah match: only valid for protocol 51 [ 634.785498][ T8951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.813566][T23192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.950659][T28711] netlink: 'syz.4.5882': attribute type 13 has an invalid length. [ 635.272584][T28716] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 635.294632][T28716] syzkaller0: entered promiscuous mode [ 635.300153][T28716] syzkaller0: entered allmulticast mode [ 635.340241][T28719] macsec0: Caught tx_queue_len zero misconfig [ 635.358680][T28721] tipc: Started in network mode [ 635.363609][T28721] tipc: Node identity e6a450c0bb62, cluster identity 4711 [ 635.415578][T28721] tipc: Enabled bearer , priority 0 [ 635.573755][T28706] tipc: Resetting bearer [ 635.600244][T28706] tipc: Disabling bearer [ 635.633369][T28715] wg1 speed is unknown, defaulting to 1000 [ 635.824189][T28745] 8021q: adding VLAN 0 to HW filter on device bond10 [ 636.131557][T28760] x_tables: ip_tables: ah match: only valid for protocol 51 [ 636.212194][T28715] lo speed is unknown, defaulting to 1000 [ 636.703696][T28773] wg1 speed is unknown, defaulting to 1000 [ 636.932525][T28796] net_ratelimit: 6 callbacks suppressed [ 636.932539][T28796] openvswitch: netlink: Key type 148 is out of range max 32 [ 637.005183][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.051916][T28773] lo speed is unknown, defaulting to 1000 [ 637.917638][ T5820] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 637.928581][ T5820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 637.938329][ T5820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 637.948981][ T5820] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 637.956924][ T5820] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 637.967268][T23194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.976837][T25510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.036957][T28825] wg1 speed is unknown, defaulting to 1000 [ 638.044844][ T8951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.187760][T28825] lo speed is unknown, defaulting to 1000 [ 638.287658][T28825] chnl_net:caif_netlink_parms(): no params data found [ 638.351724][T28825] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.359156][T28825] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.367010][T28825] bridge_slave_0: entered allmulticast mode [ 638.374237][T28825] bridge_slave_0: entered promiscuous mode [ 638.382049][T28825] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.389625][T28825] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.397268][T28825] bridge_slave_1: entered allmulticast mode [ 638.404540][T28825] bridge_slave_1: entered promiscuous mode [ 638.430129][T28825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.442007][T28825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.470790][T28825] team0: Port device team_slave_0 added [ 638.479393][T28825] team0: Port device team_slave_1 added [ 638.501662][T28825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.508720][T28825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.535618][T28825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.547655][T28825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.554749][T28825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.581035][T28825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.622133][T28825] hsr_slave_0: entered promiscuous mode [ 638.628594][T28825] hsr_slave_1: entered promiscuous mode [ 638.635373][T28825] debugfs: 'hsr0' already exists in 'hsr' [ 638.641142][T28825] Cannot create hsr debugfs directory [ 638.746809][T28825] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.758402][T28825] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.851664][T28825] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.862236][T28825] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.929640][T28825] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.940356][T28825] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.002013][T28825] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.014256][T28825] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.095944][ T8951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.667587][T28786] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 639.737222][T28825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 639.769194][T28825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 639.836977][T28825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 639.856511][T28835] netlink: 'syz.3.5910': attribute type 3 has an invalid length. [ 639.864292][T28835] netlink: 'syz.3.5910': attribute type 1 has an invalid length. [ 639.875349][T28825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 639.892431][T23192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.902746][T25510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.912300][ T8951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.920768][T28835] __nla_validate_parse: 8 callbacks suppressed [ 639.920784][T28835] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.5910'. [ 639.938228][T28840] x_tables: ip_tables: ah match: only valid for protocol 51 [ 639.964830][T28840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5909'. [ 639.980945][T28850] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5913'. [ 639.990292][T28850] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5913'. [ 640.000797][T28850] netlink: 'syz.1.5913': attribute type 6 has an invalid length. [ 640.009194][T28850] netlink: 'syz.1.5913': attribute type 5 has an invalid length. [ 640.017561][T28850] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5913'. [ 640.030819][T28851] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5913'. [ 640.054969][ T5816] Bluetooth: hci5: command tx timeout [ 640.066882][T28851] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5913'. [ 640.098383][T28858] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5914'. [ 640.127733][ T8951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.139656][T28851] netlink: 'syz.1.5913': attribute type 6 has an invalid length. [ 640.159706][T28851] netlink: 'syz.1.5913': attribute type 5 has an invalid length. [ 640.185668][T28851] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5913'. [ 640.265160][T13815] lec:lec_start_xmit: lec0:No lecd attached [ 640.300133][T28872] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5917'. [ 640.322184][T28825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.374042][T28869] macsec1: entered allmulticast mode [ 640.380078][T28869] macsec0: entered allmulticast mode [ 640.419056][T28825] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.448066][T23193] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.455263][T23193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.546002][T28885] smc: net device wlan0 applied user defined pnetid SYZ0 [ 640.563254][T23192] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.570559][T23192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.769978][T28893] x_tables: ip_tables: ah match: only valid for protocol 51 [ 640.830686][T28898] netlink: 'syz.3.5927': attribute type 3 has an invalid length. [ 640.855006][T28898] netlink: 'syz.3.5927': attribute type 1 has an invalid length. [ 640.882240][T28903] netlink: 'syz.3.5927': attribute type 3 has an invalid length. [ 640.906878][T28903] netlink: 'syz.3.5927': attribute type 1 has an invalid length. [ 640.957338][T28910] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 641.071380][T28825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.318998][T28825] veth0_vlan: entered promiscuous mode [ 641.368411][T28825] veth1_vlan: entered promiscuous mode [ 641.425757][T28945] x_tables: ip_tables: ah match: only valid for protocol 51 [ 641.478369][T28825] veth0_macvtap: entered promiscuous mode [ 641.512237][T28825] veth1_macvtap: entered promiscuous mode [ 641.582961][T28825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.620151][T28825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.730649][T23182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.752051][T23182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.793669][T23182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.816426][T23182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.835653][T28957] syzkaller0: entered promiscuous mode [ 641.841318][T28957] syzkaller0: entered allmulticast mode [ 642.135044][ T5816] Bluetooth: hci5: command tx timeout [ 642.182123][T23186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.204621][T23186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.206158][ T8951] net_ratelimit: 1 callbacks suppressed [ 642.206174][ T8951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.305569][T23194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.335300][T23194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.404039][T28987] wg1 speed is unknown, defaulting to 1000 [ 642.449048][T23186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.458087][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.886494][T28976] lec:lec_atm_close: lec0: Shut down! [ 643.014774][T25509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.048659][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 643.059752][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 643.068404][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 643.081635][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 643.097066][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 643.258323][T25523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.341420][T17437] team0: Port device syz_tun removed [ 643.366391][T28987] lo speed is unknown, defaulting to 1000 [ 643.598109][T29012] wg1 speed is unknown, defaulting to 1000 [ 643.701295][T29031] ªªªªª9: renamed from lo (while UP) [ 643.724957][ T8960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.032225][T23182] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.073565][T23182] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.205690][ T5816] Bluetooth: hci5: command tx timeout [ 644.280732][T29046] bond0: entered promiscuous mode [ 644.287858][ T30] audit: type=1804 audit(1771147023.898:12): pid=29051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5962" name="/newroot/5/memory.events" dev="tmpfs" ino=45 res=1 errno=0 [ 644.287897][ T8951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.390988][ T30] audit: type=1800 audit(1771147023.898:13): pid=29051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5962" name="memory.events" dev="tmpfs" ino=45 res=0 errno=0 [ 644.416840][ T30] audit: type=1804 audit(1771147023.978:14): pid=29051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.5962" name="/newroot/5/memory.events" dev="tmpfs" ino=45 res=1 errno=0 [ 644.440022][T29046] bond0: left promiscuous mode [ 644.554562][T29012] lo speed is unknown, defaulting to 1000 [ 644.629192][T23184] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.747207][T23192] netdevsim netdevsim2 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.932511][T29061] __nla_validate_parse: 22 callbacks suppressed [ 644.932530][T29061] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5965'. [ 645.107987][T23194] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 645.190943][T23194] bond6 (unregistering): (slave ip6gretap2): Releasing active interface [ 645.201400][ T5816] Bluetooth: hci1: command tx timeout [ 645.334817][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.591641][T23194] bond12 (unregistering): (slave gretap0): Releasing active interface [ 646.059218][ T8960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.123840][T23194] bond0 (unregistering): left promiscuous mode [ 646.130728][T23194] bond_slave_0: left promiscuous mode [ 646.137790][T23194] bond_slave_1: left promiscuous mode [ 646.242595][T23194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.311108][ T5816] Bluetooth: hci5: command tx timeout [ 646.311308][T23194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.351352][T23194] bond0 (unregistering): Released all slaves [ 646.365084][T23194] bond1 (unregistering): Released all slaves [ 646.391082][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.400228][T23194] team0: Port device macvlan2 removed [ 646.463327][T23194] bond2 (unregistering): Released all slaves [ 646.502214][T23194] bond3 (unregistering): (slave wireguard0): Releasing backup interface [ 646.533632][T23194] bond3 (unregistering): Released all slaves [ 646.553169][T23194] bond4 (unregistering): Released all slaves [ 646.641827][T23194] team0: Port device macvlan4 removed [ 646.709026][T23194] bond5 (unregistering): Released all slaves [ 646.730384][T23194] bond6 (unregistering): Released all slaves [ 646.751244][T23194] bond7 (unregistering): Released all slaves [ 646.772469][T23194] bond8 (unregistering): Released all slaves [ 646.801549][T23194] bond9 (unregistering): Released all slaves [ 646.822032][T23194] bond10 (unregistering): Released all slaves [ 646.847784][T23194] bond11 (unregistering): Released all slaves [ 646.873051][T23194] bond12 (unregistering): Released all slaves [ 646.891570][T23194] bond13 (unregistering): Released all slaves [ 646.911199][T23194] bond14 (unregistering): Released all slaves [ 647.119412][T23194] tipc: Left network mode [ 647.244601][ T5816] Bluetooth: hci1: command tx timeout [ 647.266951][T29093] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20000 [ 647.409230][ T8951] net_ratelimit: 1 callbacks suppressed [ 647.409248][ T8951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.592324][T29012] chnl_net:caif_netlink_parms(): no params data found [ 647.828748][T29012] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.845441][T29012] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.852758][T29012] bridge_slave_0: entered allmulticast mode [ 647.916553][T29012] bridge_slave_0: entered promiscuous mode [ 647.961125][T29012] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.014903][T29012] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.022224][T29012] bridge_slave_1: entered allmulticast mode [ 648.054420][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5170 ms [ 648.057777][T29012] bridge_slave_1: entered promiscuous mode [ 648.062445][ C0] lec:lec_tx_timeout: lec0 [ 648.228365][T29012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.260289][T29012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.403015][T29012] team0: Port device team_slave_0 added [ 648.426599][T29012] team0: Port device team_slave_1 added [ 648.445785][ T8951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.511193][T29162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5983'. [ 648.513899][T29012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.527938][T29012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.554949][T29012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.577859][T29163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5982'. [ 648.587054][ T30] audit: type=1107 audit(1771147028.188:15): pid=29158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 648.600386][T29163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5982'. [ 648.617995][T29012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.642260][T29012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.692743][T29012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.819194][T29159] sit0: left promiscuous mode [ 648.873209][T29159] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.880456][T29159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.888066][T29159] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.895262][T29159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.922617][T29159] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 649.085421][T25510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.294782][T29012] hsr_slave_0: entered promiscuous mode [ 649.328701][ T5816] Bluetooth: hci1: command tx timeout [ 649.365500][T29012] hsr_slave_1: entered promiscuous mode [ 649.435505][T29012] debugfs: 'hsr0' already exists in 'hsr' [ 649.449994][T29012] Cannot create hsr debugfs directory [ 649.494661][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.572501][T29221] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5991'. [ 649.739868][T23194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.872845][T29237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5995'. [ 649.993133][T23194] team0 (unregistering): Port device team_slave_1 removed [ 650.023347][T23194] team0 (unregistering): Port device team_slave_0 removed [ 650.275067][T29249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5996'. [ 650.284298][T29249] block nbd1: Unsupported socket: should be TCP or UNIX. [ 650.429744][T29012] netdevsim netdevsim2 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.664605][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.899162][T29012] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.128650][T29012] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.292864][T29297] validate_nla: 6 callbacks suppressed [ 651.292885][T29297] netlink: 'syz.1.6003': attribute type 83 has an invalid length. [ 651.405459][ T5816] Bluetooth: hci1: command tx timeout [ 651.412479][T29301] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6004'. [ 651.596697][T29012] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.631867][T29301] geneve2: entered promiscuous mode [ 651.731554][T29305] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 651.734880][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.781050][T29305] netlink: 'syz.4.6006': attribute type 58 has an invalid length. [ 651.961645][T29012] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 652.046392][T29012] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 652.080336][T29012] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 652.124717][T25509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.125557][T29012] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 652.276545][T29337] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20002 [ 652.279600][T29332] tun0: tun_chr_ioctl cmd 1074025675 [ 652.292119][T29332] tun0: persist enabled [ 652.480031][T29012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.547819][T29353] wg1 speed is unknown, defaulting to 1000 [ 652.589226][T29012] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.732191][T23194] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.739399][T23194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.774919][ T8951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.788557][T23182] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.795789][T23182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.148291][T29353] lo speed is unknown, defaulting to 1000 [ 653.158354][ T10] IPVS: starting estimator thread 0... [ 653.202814][T29391] netlink: 'syz.4.6022': attribute type 1 has an invalid length. [ 653.220921][T29392] netlink: 'syz.4.6022': attribute type 1 has an invalid length. [ 653.255734][T29389] IPVS: using max 38 ests per chain, 91200 per kthread [ 653.328200][T25510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.398040][T29397] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 653.422302][T29397] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 653.637805][T29012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.713117][T29420] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 653.788877][T29012] veth0_vlan: entered promiscuous mode [ 653.814300][T29012] veth1_vlan: entered promiscuous mode [ 653.842746][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.911419][T29012] veth0_macvtap: entered promiscuous mode [ 653.930069][T29012] veth1_macvtap: entered promiscuous mode [ 654.075209][T29438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6030'. [ 654.133168][T29441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6030'. [ 654.137411][T29012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.189026][T29443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6031'. [ 654.245564][T29012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.360596][T29443] bond1: option ad_actor_sys_prio: invalid value (0) [ 654.393075][T29443] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 654.442332][T29443] bond1 (unregistering): Released all slaves [ 654.520075][T23194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.529536][T23194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.577320][T23194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.606430][T23194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.846806][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.883948][T29476] syzkaller0: entered promiscuous mode [ 654.914593][T29476] syzkaller0: entered allmulticast mode [ 654.958975][T29489] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6038'. [ 655.037702][T29495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6040'. [ 655.050279][T29495] netlink: 'syz.4.6040': attribute type 30 has an invalid length. [ 655.085593][T29488] macsec0: left allmulticast mode [ 655.100404][T23192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.116142][T23192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.145935][T23194] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 655.146042][T29495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6040'. [ 655.169189][ T8960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.193303][T29495] netlink: 'syz.4.6040': attribute type 30 has an invalid length. [ 655.230517][T23194] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 655.242180][T29507] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 655.333058][T23194] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 655.374540][T23194] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 655.436081][T23194] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.464629][T23194] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.473394][T23194] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.538084][T23194] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.575829][T23194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.592562][T23194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.886724][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.935103][T29541] netlink: 'syz.2.5952': attribute type 3 has an invalid length. [ 655.983547][T29545] block nbd1: Unsupported socket: should be TCP or UNIX. [ 656.115364][T29553] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20000 [ 656.134754][T29552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6054'. [ 656.206922][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 656.218600][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 656.227718][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 656.248115][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 656.265829][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 656.423891][T29567] wg1 speed is unknown, defaulting to 1000 [ 656.937603][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.938466][T29582] netlink: 11 bytes leftover after parsing attributes in process `syz.0.6059'. [ 657.086116][T29555] wg1 speed is unknown, defaulting to 1000 [ 657.096597][T29567] lo speed is unknown, defaulting to 1000 [ 657.555109][T29614] netlink: 'syz.0.6065': attribute type 1 has an invalid length. [ 657.642303][T29619] netlink: 'syz.0.6065': attribute type 4 has an invalid length. [ 657.713217][T29614] netlink: 'syz.0.6065': attribute type 4 has an invalid length. [ 657.951316][T29555] lo speed is unknown, defaulting to 1000 [ 657.964839][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.193935][T29616] wg1 speed is unknown, defaulting to 1000 [ 658.205411][ T8960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.223815][T29642] netlink: 'syz.2.6069': attribute type 2 has an invalid length. [ 658.276037][T29642] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6069'. [ 658.368988][ T5816] Bluetooth: hci0: command tx timeout [ 658.463110][T29650] netlink: 71 bytes leftover after parsing attributes in process `syz.0.6070'. [ 658.615418][T29655] netlink: 'syz.4.6072': attribute type 1 has an invalid length. [ 658.633378][T29655] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6072'. [ 658.649502][T29658] ip6gretap1: entered allmulticast mode [ 658.777093][T29665] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6074'. [ 658.796807][T29661] syzkaller0: entered promiscuous mode [ 658.802422][T29661] syzkaller0: entered allmulticast mode [ 658.831491][T29555] chnl_net:caif_netlink_parms(): no params data found [ 658.981653][T29616] lo speed is unknown, defaulting to 1000 [ 659.015005][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.146551][T29555] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.162121][T29555] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.173320][T29681] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6078'. [ 659.183841][T29555] bridge_slave_0: entered allmulticast mode [ 659.184984][T29681] netlink: 'syz.2.6078': attribute type 1 has an invalid length. [ 659.200558][T29555] bridge_slave_0: entered promiscuous mode [ 659.247861][T29555] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.255268][T29555] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.262487][T29555] bridge_slave_1: entered allmulticast mode [ 659.285939][T29555] bridge_slave_1: entered promiscuous mode [ 659.384889][T29676] wg1 speed is unknown, defaulting to 1000 [ 659.388316][T29555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.424975][T29555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.533480][T29555] team0: Port device team_slave_0 added [ 659.560537][T29555] team0: Port device team_slave_1 added [ 659.612130][T29555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.641554][T29555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.737509][T29555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.765913][T29555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.787375][T29555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.843654][T29555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.013680][T29555] hsr_slave_0: entered promiscuous mode [ 660.020897][T29555] hsr_slave_1: entered promiscuous mode [ 660.024458][T29698] x_tables: ip_tables: ah match: only valid for protocol 51 [ 660.045205][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.073369][T29555] debugfs: 'hsr0' already exists in 'hsr' [ 660.092148][T29555] Cannot create hsr debugfs directory [ 660.103319][T29676] lo speed is unknown, defaulting to 1000 [ 660.248499][T29698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6083'. [ 660.458554][ T5816] Bluetooth: hci0: command tx timeout [ 660.467943][T29714] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6086'. [ 660.853086][T29725] 8021q: adding VLAN 0 to HW filter on device bond1 [ 661.094802][T25523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.152479][T29735] wg1 speed is unknown, defaulting to 1000 [ 661.245230][T25510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.275480][T29738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6093'. [ 661.315218][T29738] bridge_slave_1: left allmulticast mode [ 661.326468][T29741] x_tables: ip_tables: ah match: only valid for protocol 51 [ 661.326926][T29738] bridge_slave_1: left promiscuous mode [ 661.374777][T29738] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.414743][T29738] bridge_slave_0: left allmulticast mode [ 661.447138][T29738] bridge_slave_0: left promiscuous mode [ 661.484901][T29738] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.496214][T29742] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6095'. [ 661.576989][T29555] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 661.639858][T29555] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 661.674286][T29735] lo speed is unknown, defaulting to 1000 [ 661.698605][T29754] openvswitch: netlink: IP tunnel dst address not specified [ 661.706472][T29555] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 661.779415][T29555] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 661.930900][T29765] netlink: 'syz.0.6098': attribute type 62 has an invalid length. [ 661.991818][T29774] IPVS: set_ctl: invalid protocol: 58 100.1.1.1:20001 [ 662.125197][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.184950][T29794] tipc: Enabling of bearer rejected, failed to enable media [ 662.367078][T29805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6105'. [ 662.448783][T29555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.463437][T29807] x_tables: ip_tables: ah match: only valid for protocol 51 [ 662.534679][ T5816] Bluetooth: hci0: command tx timeout [ 662.554564][T29807] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6107'. [ 662.558889][T29555] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.614989][T23191] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.622117][T23191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.633153][T29812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6108'. [ 662.646378][T23191] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.653539][T23191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.780320][T29822] netlink: 'syz.2.6112': attribute type 21 has an invalid length. [ 662.924774][T25509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.037495][T29834] netlink: 'syz.4.6115': attribute type 11 has an invalid length. [ 663.061796][T29837] syzkaller0: entered promiscuous mode [ 663.067623][T29834] netlink: 140 bytes leftover after parsing attributes in process `syz.4.6115'. [ 663.072899][T29830] netlink: 'syz.0.6114': attribute type 1 has an invalid length. [ 663.076987][T29837] syzkaller0: entered allmulticast mode [ 663.168586][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.180230][T29837] tipc: Enabled bearer , priority 0 [ 663.206177][T29837] tipc: Resetting bearer [ 663.212166][T29837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.220791][T29837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.237890][T29837] tipc: Resetting bearer [ 663.269964][T29837] tipc: Disabling bearer [ 663.305454][T29555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.326716][T29845] batman_adv: batadv0: Adding interface: ipvlan2 [ 663.342351][T29845] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.370083][T29845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.414860][T29845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.425147][T29845] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 663.537500][T29860] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.6121'. [ 663.623770][T29864] x_tables: ip_tables: ah match: only valid for protocol 51 [ 663.640816][T29555] veth0_vlan: entered promiscuous mode [ 663.667952][T29862] syzkaller0: entered promiscuous mode [ 663.673470][T29862] syzkaller0: entered allmulticast mode [ 663.679747][T29864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6123'. [ 663.720142][T29555] veth1_vlan: entered promiscuous mode [ 663.770612][T29872] netlink: 'syz.0.6126': attribute type 1 has an invalid length. [ 663.779659][T29872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6126'. [ 663.880247][T29555] veth0_macvtap: entered promiscuous mode [ 663.924123][T29555] veth1_macvtap: entered promiscuous mode [ 663.969752][T29555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 663.997196][T25510] IPVS: starting estimator thread 0... [ 664.034953][T29555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.051893][T29886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 664.056915][T23194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.084699][T29883] IPVS: using max 42 ests per chain, 100800 per kthread [ 664.098707][T23194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.107657][ T30] audit: type=1800 audit(1771147043.708:16): pid=29891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6133" name="memory.events" dev="tmpfs" ino=431 res=0 errno=0 [ 664.135122][T23194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.181213][T23194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.205801][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.287656][T25510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.372807][T23194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.383858][T23194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.498229][T23193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.522468][T23193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.615280][ T5816] Bluetooth: hci0: command tx timeout [ 664.700214][T29904] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6137'. [ 664.987996][T29915] x_tables: ip_tables: ah match: only valid for protocol 51 [ 665.219601][T29925] tipc: Enabling of bearer rejected, failed to enable media [ 665.245960][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.317497][T29930] netlink: 'syz.1.6145': attribute type 1 has an invalid length. [ 665.432649][T29930] bond1 (unregistering): Released all slaves [ 665.533239][T29949] xt_CT: No such helper "snmp_trap" [ 665.550930][T29948] xt_CT: No such helper "snmp_trap" [ 665.696870][T29954] ipvlan2: entered promiscuous mode [ 665.708495][T29954] bridge0: port 3(ipvlan2) entered blocking state [ 665.714815][T29960] netlink: 'syz.3.6153': attribute type 10 has an invalid length. [ 665.716022][T29954] bridge0: port 3(ipvlan2) entered disabled state [ 665.731187][T29954] ipvlan2: entered allmulticast mode [ 665.742652][T29954] bridge0: entered allmulticast mode [ 665.752267][T29954] ipvlan2: left allmulticast mode [ 665.759916][T29954] bridge0: left allmulticast mode [ 665.857976][T29936] wg1 speed is unknown, defaulting to 1000 [ 665.881371][T29966] x_tables: ip_tables: ah match: only valid for protocol 51 [ 666.082323][T29978] netlink: 'syz.1.6158': attribute type 1 has an invalid length. [ 666.247320][T29936] lo speed is unknown, defaulting to 1000 [ 666.293759][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.333957][T29987] __nla_validate_parse: 9 callbacks suppressed [ 666.333974][T29987] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6159'. [ 666.356949][T29987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6159'. [ 666.463055][T29993] syzkaller0: entered promiscuous mode [ 666.468894][T29993] syzkaller0: entered allmulticast mode [ 666.508083][T29993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6160'. [ 666.841156][T30015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6167'. [ 666.920144][T30015] 8021q: adding VLAN 0 to HW filter on device bond2 [ 667.048013][T30015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6167'. [ 667.116208][T30023] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 667.152678][T30040] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6171'. [ 667.203952][T30023] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 667.288764][T30015] bond2 (unregistering): (slave batadv1): Releasing backup interface [ 667.325021][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.333202][ T8960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.341689][T30015] bond2 (unregistering): Released all slaves [ 667.425894][T30047] netlink: 'syz.2.6174': attribute type 13 has an invalid length. [ 667.440052][T30047] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6174'. [ 667.503476][T30051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6175'. [ 667.578603][T30055] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.6176'. [ 667.698617][T30068] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20004 [ 667.760844][T30066] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6177'. [ 667.814960][T30077] netlink: 'syz.4.6179': attribute type 4 has an invalid length. [ 667.840944][T30081] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 667.940443][T30071] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 668.027978][T30084] tipc: Enabling of bearer rejected, failed to enable media [ 668.241677][T30101] netlink: 'syz.4.6182': attribute type 2 has an invalid length. [ 668.365913][T25523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.680469][T30127] sctp: [Deprecated]: syz.1.6189 (pid 30127) Use of struct sctp_assoc_value in delayed_ack socket option. [ 668.680469][T30127] Use struct sctp_sack_info instead [ 669.142513][T30157] team0 (unregistering): Port device team_slave_0 removed [ 669.159773][T30157] team0 (unregistering): Port device team_slave_1 removed [ 669.405243][T25523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.095931][T30217] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 670.207355][T30224] tipc: Started in network mode [ 670.237895][T30224] tipc: Node identity , cluster identity 4711 [ 670.244113][T30224] tipc: Failed to obtain node identity [ 670.263609][T30224] tipc: Enabling of bearer rejected, failed to enable media [ 670.291495][T30229] 0ªX¹¦À: renamed from caif0 [ 670.314119][T30229] 0ªX¹¦À: entered allmulticast mode [ 670.325516][T30229] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 670.368456][ T8960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.449556][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.482921][T30230] batman_adv: batadv0: Adding interface: ipvlan2 [ 670.504521][T30230] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.549325][T30230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.560634][T30230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.571861][T30230] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 670.628886][T30245] tun0: tun_chr_ioctl cmd 1074025675 [ 670.634240][T30245] tun0: persist enabled [ 670.639027][T30245] tun0: tun_chr_ioctl cmd 1074025675 [ 670.647320][T30245] tun0: persist disabled [ 670.809665][T30255] ipvlan2: entered allmulticast mode [ 670.836318][T30255] veth0_vlan: entered allmulticast mode [ 670.863204][T30261] netlink: 'syz.0.6218': attribute type 1 has an invalid length. [ 670.969759][T30257] xt_CT: No such helper "snmp_trap" [ 671.486558][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.496756][T30293] lec:lec_atm_close: lec0: Shut down! [ 672.535852][ T8960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.544169][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.562531][T23199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.407384][ T8960] net_ratelimit: 2 callbacks suppressed [ 673.407399][ T8960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.578494][T25523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.827026][T30315] __nla_validate_parse: 39 callbacks suppressed [ 673.827045][T30315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6227'. [ 673.902471][T30311] bridge_slave_0: left allmulticast mode [ 673.918138][T30311] bridge_slave_0: left promiscuous mode [ 673.923977][T30311] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.941261][T30311] bridge_slave_1: left allmulticast mode [ 673.958562][T30311] bridge_slave_1: left promiscuous mode [ 673.984409][T30311] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.001220][T30311] bond0: (slave bond_slave_0): Releasing backup interface [ 674.018563][T30311] bond0: (slave bond_slave_1): Releasing backup interface [ 674.036064][T30311] team0: Port device team_slave_0 removed [ 674.048539][T30311] team0: Port device team_slave_1 removed [ 674.058271][T30311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.067591][T30311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.077556][T30311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.086917][T30311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.102673][T30311] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 674.127305][T30326] team0: Mode changed to "activebackup" [ 674.369862][T30334] wg1 speed is unknown, defaulting to 1000 [ 674.410505][T30357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6232'. [ 674.586173][T30360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6233'. [ 674.604977][T25523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.738635][T30334] lo speed is unknown, defaulting to 1000 [ 674.852500][T30382] netlink: 'syz.3.6239': attribute type 2 has an invalid length. [ 674.942631][T30384] netlink: 'syz.3.6239': attribute type 2 has an invalid length. [ 675.012461][T30382] !©9: entered promiscuous mode [ 675.028549][T30384] !©9: left promiscuous mode [ 675.118816][T30392] syzkaller0: entered promiscuous mode [ 675.128340][T30392] syzkaller0: entered allmulticast mode [ 675.201199][T30396] netlink: 210232 bytes leftover after parsing attributes in process `syz.1.6240'. [ 675.302250][T30400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.310983][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.398213][T30402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6243'. [ 675.607408][T30421] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6245'. [ 675.828451][T30432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6248'. [ 675.945524][T30435] syzkaller1: entered promiscuous mode [ 675.964234][T30435] syzkaller1: entered allmulticast mode [ 676.031259][T30438] syzkaller0: entered promiscuous mode [ 676.039184][T30438] syzkaller0: entered allmulticast mode [ 676.426021][T30460] ªªªªª9: renamed from lo (while UP) [ 676.622890][T30450] wg1 speed is unknown, defaulting to 1000 [ 677.079985][T30492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6260'. [ 677.094391][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5600 ms [ 677.102489][ C0] lec:lec_tx_timeout: lec0 [ 677.301010][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 677.316216][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 677.331328][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 677.344698][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 677.361169][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 677.641854][T30512] netlink: 'syz.1.6262': attribute type 58 has an invalid length. [ 677.702239][T30516] netlink: 'syz.1.6262': attribute type 1 has an invalid length. [ 677.729347][T30498] wg1 speed is unknown, defaulting to 1000 [ 677.737006][T30450] lo speed is unknown, defaulting to 1000 [ 678.190360][T23193] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.208561][T23193] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.422092][ T5816] Bluetooth: hci3: command tx timeout [ 680.216317][T30498] lo speed is unknown, defaulting to 1000 [ 680.279277][T23193] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.289927][T23193] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.467017][T30554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6272'. [ 680.486301][T23193] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.514704][T23193] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.645617][T30554] vlan2: entered promiscuous mode [ 680.650715][T30554] bond0: entered promiscuous mode [ 680.666104][T30554] bond_slave_0: entered promiscuous mode [ 680.672013][T30554] bond_slave_1: entered promiscuous mode [ 680.823454][T23193] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.856028][T23193] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.898157][T30563] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6274'. [ 680.921662][T30563] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6274'. [ 680.972093][T30563] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6274'. [ 681.004964][T30563] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6274'. [ 681.018049][T30563] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6274'. [ 681.056667][T30563] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6274'. [ 681.105766][T30563] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6274'. [ 681.137564][T30563] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6274'. [ 681.159046][T30563] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6274'. [ 681.495831][ T5816] Bluetooth: hci3: command tx timeout [ 681.775027][T30563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.808009][T30563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.245887][T23192] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.255396][T23192] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.287004][T23192] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.315958][T23192] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.463870][T23184] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.511270][T30617] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 682.535349][T23192] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.608392][T23194] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.694911][T23192] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.735744][T23193] bridge_slave_1: left allmulticast mode [ 682.760621][T23193] bridge_slave_1: left promiscuous mode [ 682.799101][T23193] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.948187][T23193] bridge_slave_0: left allmulticast mode [ 682.957337][T23193] bridge_slave_0: left promiscuous mode [ 682.963230][T23193] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.462061][T23193] bond4 (unregistering): (slave gretap1): Releasing backup interface [ 683.484760][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.575205][ T5816] Bluetooth: hci3: command tx timeout [ 683.651061][T23193] bond8 (unregistering): (slave bridge2): Releasing active interface [ 683.728767][T23193] bond1 (unregistering): Released all slaves [ 683.741812][T23193] bond2 (unregistering): Released all slaves [ 683.755673][T23193] bond3 (unregistering): Released all slaves [ 683.769217][T23193] bond4 (unregistering): (slave bond5): Releasing backup interface [ 683.785060][T23193] bond4 (unregistering): Released all slaves [ 683.798666][T23193] bond5 (unregistering): Released all slaves [ 683.811585][T23193] bond6 (unregistering): Released all slaves [ 683.832373][T23193] bond7 (unregistering): Released all slaves [ 683.845307][T23193] bond8 (unregistering): Released all slaves [ 683.871439][T23193] bond0 (unregistering): Released all slaves [ 683.885438][T23193] bond9 (unregistering): Released all slaves [ 683.901599][T30643] netlink: 'syz.2.6286': attribute type 3 has an invalid length. [ 683.963798][T30654] ip6erspan0: entered allmulticast mode [ 684.053371][T30498] chnl_net:caif_netlink_parms(): no params data found [ 684.088924][T23193] hmac(sha224: left promiscuous mode [ 684.157098][T23193] : left promiscuous mode [ 684.215109][T30681] siw: device registration error -23 [ 684.249035][T30685] sock: sock_timestamping_bind_phc: sock not bind to device [ 684.290955][T23193] tipc: Disabling bearer [ 684.297573][T23193] tipc: Disabling bearer [ 684.358799][T23193] tipc: Left network mode [ 684.365900][T30498] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.375333][T30498] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.393148][T30498] bridge_slave_0: entered allmulticast mode [ 684.412326][T30498] bridge_slave_0: entered promiscuous mode [ 684.436375][T30498] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.448294][T30498] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.456443][T30498] bridge_slave_1: entered allmulticast mode [ 684.465008][T30498] bridge_slave_1: entered promiscuous mode [ 684.494007][T30695] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 684.528663][T30700] blkio.reset_stats is deprecated [ 684.549032][T30685] bond0: (slave rose0): Releasing backup interface [ 684.654764][T30696] wg1 speed is unknown, defaulting to 1000 [ 684.670386][T30498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.698321][T30498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.862296][T30713] netlink: 'syz.2.6299': attribute type 3 has an invalid length. [ 684.876155][T30713] netlink: 'syz.2.6299': attribute type 2 has an invalid length. [ 684.884239][T30713] netlink: 'syz.2.6299': attribute type 2 has an invalid length. [ 684.930944][T30696] lo speed is unknown, defaulting to 1000 [ 684.978539][T30498] team0: Port device team_slave_0 added [ 685.002427][T30498] team0: Port device team_slave_1 added [ 685.166372][T30498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.183836][T30498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.232547][T30498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.272547][T30713] vlan2: entered allmulticast mode [ 685.278000][T30713] bridge_slave_0: entered allmulticast mode [ 685.291535][T30498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.336280][T30498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.369465][T30498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.476624][T30740] __nla_validate_parse: 153 callbacks suppressed [ 685.476646][T30740] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6306'. [ 685.645788][ T5816] Bluetooth: hci3: command tx timeout [ 685.862914][T30755] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6310'. [ 685.878946][T30498] hsr_slave_0: entered promiscuous mode [ 685.887164][T30498] hsr_slave_1: entered promiscuous mode [ 685.893447][T30498] debugfs: 'hsr0' already exists in 'hsr' [ 685.899384][T30498] Cannot create hsr debugfs directory [ 685.976154][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 685.982571][ T1297] clip:clip_start_xmit: skb_dst(skb) == NULL [ 686.106227][T30755] lo: Caught tx_queue_len zero misconfig [ 686.269831][T30764] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6312'. [ 686.360601][T30767] netlink: 'syz.4.6312': attribute type 1 has an invalid length. [ 686.433154][T30762] wg1 speed is unknown, defaulting to 1000 [ 686.819751][T23193] hsr_slave_0: left promiscuous mode [ 686.852602][T23193] hsr_slave_1: left promiscuous mode [ 686.871538][T23193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.885962][T23193] batadv0: mtu less than device minimum [ 686.898439][T23193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 686.910501][T23193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 686.922361][T23193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 686.934186][T23193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 686.946018][T23193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 686.957850][T23193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 687.011466][T23193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 687.020295][T23193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 687.060918][T23193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 687.069096][T23193] batman_adv: batadv0: Interface deactivated: dummy0 [ 687.076148][T23193] batman_adv: batadv0: Removing interface: dummy0 [ 687.093781][T23193] veth1_macvtap: left promiscuous mode [ 687.103706][T23193] veth0_macvtap: left promiscuous mode [ 687.111228][T23193] veth1_vlan: left promiscuous mode [ 687.121872][T23193] veth0_vlan: left promiscuous mode [ 687.482776][T30784] syzkaller0: entered promiscuous mode [ 687.495807][T30784] syzkaller0: entered allmulticast mode [ 687.506300][T30762] lo speed is unknown, defaulting to 1000 [ 687.730018][T30498] netdevsim netdevsim3 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.818893][T30814] netlink: 'syz.0.6317': attribute type 28 has an invalid length. [ 687.977798][T30498] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.329783][T30498] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.506899][T30498] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.531409][T30835] can: request_module (can-proto-3) failed. [ 688.558366][T23193] IPVS: stop unused estimator thread 0... [ 688.902920][T30856] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6325'. [ 688.950647][T30856] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6325'. [ 688.994106][T30856] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6325'. [ 689.010776][T30498] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 689.063101][T30864] batadv0: entered promiscuous mode [ 689.079329][T30864] net_ratelimit: 33 callbacks suppressed [ 689.079348][T30864] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 689.152213][T25509] IPVS: starting estimator thread 0... [ 689.164100][T30872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6328'. [ 689.165487][T30498] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 689.250596][T30498] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 689.300800][T30871] IPVS: using max 31 ests per chain, 74400 per kthread [ 689.312025][T30498] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 689.510709][T30896] smc: net device wlan0 erased user defined pnetid SYZ0 [ 689.676812][T30498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.759907][T30498] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.804056][T23186] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.811391][T23186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.868251][T30915] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6335'. [ 689.900467][T30915] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.907923][T30915] bridge0: port 1(1¾x9ÿ) entered disabled state [ 689.940456][T30916] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6335'. [ 689.954752][T30920] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6335'. [ 689.993537][T23184] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.000780][T23184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.040822][T30916] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.048090][T30916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.055645][T30916] bridge0: port 1(1¾x9ÿ) entered blocking state [ 690.062101][T30916] bridge0: port 1(1¾x9ÿ) entered forwarding state [ 690.077252][T30916] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.084666][T30916] bridge0: port 1(1¾x9ÿ) entered disabled state [ 690.137889][T30920] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.145128][T30920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.152646][T30920] bridge0: port 1(1¾x9ÿ) entered blocking state [ 690.159199][T30920] bridge0: port 1(1¾x9ÿ) entered forwarding state [ 690.182754][T30920] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.190038][T30920] bridge0: port 1(1¾x9ÿ) entered disabled state [ 690.805572][T30498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 690.872552][T30955] delete_channel: no stack [ 690.963224][T30498] veth0_vlan: entered promiscuous mode [ 691.027684][T30498] veth1_vlan: entered promiscuous mode [ 691.084902][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms [ 691.092984][ C0] lec:lec_tx_timeout: lec0 [ 691.149087][T30498] veth0_macvtap: entered promiscuous mode [ 691.196827][T30973] netlink: 'syz.1.6345': attribute type 39 has an invalid length. [ 691.204706][T30498] veth1_macvtap: entered promiscuous mode [ 691.249882][T30498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.353228][T30498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.445451][T23192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.470317][T23192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.496656][T23194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.544228][T23194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.698169][T30994] netlink: 'syz.4.6349': attribute type 1 has an invalid length. [ 691.739253][T30994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 691.881912][T23194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.934744][T23194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.072131][T23192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.089098][T23192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.346971][T31028] openvswitch: netlink: Key type 229 is out of range max 32 [ 692.765228][T31021] netlink: 'syz.1.6353': attribute type 53 has an invalid length. [ 693.331283][T31082] __nla_validate_parse: 3 callbacks suppressed [ 693.331301][T31082] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6368'. [ 693.525569][T31085] syzkaller0: entered promiscuous mode [ 693.535518][T31085] syzkaller0: entered allmulticast mode [ 693.689911][T31103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6372'. [ 693.787603][T31109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6375'. [ 693.803028][T31110] netlink: del zone limit has 4 unknown bytes [ 693.832708][T31109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6375'. [ 693.860120][T31113] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:52768 [ 694.104003][T31128] x_tables: duplicate underflow at hook 3 [ 694.124989][ T5820] Bluetooth: hci3: command 0x0405 tx timeout [ 694.395246][T31150] netlink: 'syz.1.6386': attribute type 10 has an invalid length. [ 694.446851][T31154] netlink: 'syz.1.6386': attribute type 5 has an invalid length. [ 694.968646][T31150] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.010196][T31150] team0: entered promiscuous mode [ 695.043605][T31150] team_slave_0: entered promiscuous mode [ 695.067188][T31150] team_slave_1: entered promiscuous mode [ 695.105298][T31150] bond0: (slave team0): Enslaving as an active interface with an up link [ 695.175628][T23194] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.197997][T23194] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.294042][T23194] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.305586][T31165] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6385'. [ 695.313726][T23194] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.956506][T31217] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 696.128373][T31229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6403'. [ 696.131591][T31228] bond3: option mode: invalid value (254) [ 696.151633][T31234] netlink: 'syz.3.6404': attribute type 10 has an invalid length. [ 696.155819][T31228] bond3 (unregistering): Released all slaves [ 696.262232][T31234] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 696.313085][T31234] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 696.341638][T31234] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 696.365861][T31242] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6406'. [ 696.565129][T31252] netlink: 'syz.1.6407': attribute type 1 has an invalid length. [ 696.565867][T31257] netlink: 'syz.1.6407': attribute type 1 has an invalid length. [ 696.647899][T31252] 8021q: adding VLAN 0 to HW filter on device bond1 [ 696.733509][T31267] sit0: entered promiscuous mode [ 696.751097][T31267] netlink: 'syz.1.6410': attribute type 1 has an invalid length. [ 696.782367][T31267] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6410'. [ 696.793733][T31268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6410'. [ 696.872326][T31271] netlink: 'syz.0.6411': attribute type 5 has an invalid length. [ 696.880895][T31273] syz_tun: entered promiscuous mode [ 696.916861][T31271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6411'. [ 696.930133][T31273] syz_tun: refused to change device tx_queue_len [ 696.940254][T31273] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 697.071316][T31276] sctp: [Deprecated]: syz.4.6413 (pid 31276) Use of struct sctp_assoc_value in delayed_ack socket option. [ 697.071316][T31276] Use struct sctp_sack_info instead [ 697.868428][T31331] vlan1: entered promiscuous mode [ 697.890680][T31321] vlan1: left promiscuous mode [ 698.536774][T31359] __nla_validate_parse: 8 callbacks suppressed [ 698.536794][T31359] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6432'. [ 698.671190][T31368] netlink: 'syz.4.6436': attribute type 2 has an invalid length. [ 698.706267][T31363] bond2: Unable to set up delay as MII monitoring is disabled [ 698.720201][T31363] bond2 (unregistering): Released all slaves [ 698.744254][T31376] x_tables: ip_tables: ah match: only valid for protocol 51 [ 698.813756][T31368] !: entered promiscuous mode [ 698.888644][T31376] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6438'. [ 699.086151][T31394] netlink: 'syz.4.6441': attribute type 1 has an invalid length. [ 699.095385][T31394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6441'. [ 699.111236][T31394] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6441'. [ 699.120971][T31394] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6441'. [ 699.133601][T31398] tipc: Enabling of bearer rejected, failed to enable media [ 699.252871][T31408] netlink: 312 bytes leftover after parsing attributes in process `syz.4.6446'. [ 699.359770][T31416] smc: net device wlan0 applied user defined pnetid SYZ0 [ 699.598254][T31433] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6454'. [ 699.668798][T31433] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6454'. [ 699.704301][T31444] x_tables: ip_tables: ah match: only valid for protocol 51 [ 699.711729][T31433] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6454'. [ 699.729958][T31441] nftables ruleset with unbound chain [ 699.734977][T31433] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6454'. [ 699.760839][T31446] netlink: 'syz.2.6459': attribute type 1 has an invalid length. [ 699.993419][T31433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.119231][T31433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 700.627422][T31447] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 700.628489][T31446] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 700.660558][T23191] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.705115][T23191] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.738478][T31469] syzkaller0: entered promiscuous mode [ 700.747000][T31469] syzkaller0: entered allmulticast mode [ 700.813507][T23191] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.848962][T23191] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.626864][T31510] vlan2: entered promiscuous mode [ 701.636705][T31510] team0: entered promiscuous mode [ 701.908137][T31538] netlink: 'syz.1.6472': attribute type 1 has an invalid length. [ 701.921273][T31542] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 702.747409][T31589] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x15 [ 702.929801][T31598] netlink: 'syz.2.6488': attribute type 7 has an invalid length. [ 703.195187][T31598] syzkaller0: entered promiscuous mode [ 703.200794][T31598] syzkaller0: entered allmulticast mode [ 703.606561][T31643] __nla_validate_parse: 159 callbacks suppressed [ 703.606583][T31643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6496'. [ 703.665282][T31643] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6496'. [ 703.702897][T31643] vlan2: entered allmulticast mode [ 703.810936][T31655] wg1 speed is unknown, defaulting to 1000 [ 703.961236][T31662] delete_channel: no stack [ 704.118318][T31655] lo speed is unknown, defaulting to 1000 [ 704.126073][T31676] wg1 speed is unknown, defaulting to 1000 [ 704.129809][T31685] tipc: Started in network mode [ 704.141027][T31685] tipc: Node identity 06b622d70eba, cluster identity 4711 [ 704.174838][T31685] tipc: Enabled bearer , priority 0 [ 704.197917][T31681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6507'. [ 704.282327][T31685] tipc: Disabling bearer [ 704.559991][T31713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6512'. [ 704.773503][T31676] lo speed is unknown, defaulting to 1000 [ 705.092279][T13815] lec:lec_start_xmit: lec0:No lecd attached [ 705.098879][T31736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6518'. [ 705.108756][T31731] ip6tnl0: Caught tx_queue_len zero misconfig [ 705.196851][T31736] veth3: entered promiscuous mode [ 705.412060][T31750] netlink: 'syz.4.6522': attribute type 8 has an invalid length. [ 705.467158][T31752] netlink: 'syz.4.6522': attribute type 10 has an invalid length. [ 705.500216][T31751] ipvlan2: entered promiscuous mode [ 705.578926][T31756] ipvlan2: entered promiscuous mode [ 705.583537][T31758] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6526'. [ 705.586578][T31756] bridge0: port 1(ipvlan2) entered blocking state [ 705.606567][T31756] bridge0: port 1(ipvlan2) entered disabled state [ 705.613663][T31756] ipvlan2: entered allmulticast mode [ 705.619478][T31756] bridge0: entered allmulticast mode [ 705.627898][T31756] ipvlan2: left allmulticast mode [ 705.633229][T31756] bridge0: left allmulticast mode [ 705.811631][T31769] virt_wifi0: mtu greater than device maximum [ 705.885691][T31776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6531'. [ 706.158551][T31789] wg1 speed is unknown, defaulting to 1000 [ 706.332865][T31789] lo speed is unknown, defaulting to 1000 [ 706.407556][T31805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6539'. [ 706.444025][T31805] veth4: entered allmulticast mode [ 706.564613][T31808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 706.975670][T31827] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6543'. [ 707.007905][T31826] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6543'. [ 707.131473][T31841] netlink: del zone limit has 4 unknown bytes [ 707.334818][T31850] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 707.432171][T31853] netem: invalid attributes len -1 [ 707.438077][T31853] netem: change failed [ 707.953913][T31888] syzkaller0: entered promiscuous mode [ 707.984878][T31888] syzkaller0: entered allmulticast mode [ 707.997267][T31888] netlink: 'syz.2.6561': attribute type 1 has an invalid length. [ 708.034695][T31888] netlink: 'syz.2.6561': attribute type 2 has an invalid length. [ 708.042466][T31888] netlink: 'syz.2.6561': attribute type 1 has an invalid length. [ 708.065484][T31888] netlink: 'syz.2.6561': attribute type 3 has an invalid length. [ 708.254528][T31904] netlink: 'syz.1.6565': attribute type 1 has an invalid length. [ 708.313498][T31904] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 708.328348][T31905] netlink: 'syz.3.6567': attribute type 5 has an invalid length. [ 708.349456][T31904] netlink: 'syz.1.6565': attribute type 1 has an invalid length. [ 708.396199][T31905] ip6erspan0: entered promiscuous mode [ 708.402612][T31913] siw: device registration error -23 [ 708.698040][T31927] __nla_validate_parse: 9 callbacks suppressed [ 708.698060][T31927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6574'. [ 708.737718][T31930] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6575'. [ 708.762645][T31930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6575'. [ 708.797301][T31890] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 709.137868][T31952] mac80211_hwsim hwsim86 wlan0: entered promiscuous mode [ 709.331456][T31972] x_tables: ip_tables: ah match: only valid for protocol 51 [ 709.376484][T31972] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6589'. [ 709.401483][T31966] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6585'. [ 709.466104][T31985] netlink: 'syz.4.6590': attribute type 1 has an invalid length. [ 709.854155][T32005] syzkaller0: entered promiscuous mode [ 709.859798][T32005] syzkaller0: entered allmulticast mode [ 710.050920][T32025] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6599'. [ 710.061494][T32027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6597'. [ 710.104363][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 710.112433][ C0] lec:lec_tx_timeout: lec0 [ 710.141297][T32024] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6598'. [ 710.153905][T32026] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6596'. [ 710.275393][T32041] x_tables: ip_tables: ah match: only valid for protocol 51 [ 710.352121][T32041] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6602'. [ 710.436939][T32045] netlink: 'syz.2.6604': attribute type 7 has an invalid length. [ 710.445216][T32045] netlink: 'syz.2.6604': attribute type 8 has an invalid length. [ 710.525097][ T5820] Bluetooth: hci3: command 0x0405 tx timeout [ 710.983132][T32091] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 711.145316][T32102] x_tables: ip_tables: ah match: only valid for protocol 51 [ 711.356146][T32116] 8021q: adding VLAN 0 to HW filter on device bond3 [ 711.413768][T32121] ipvlan2: left allmulticast mode [ 711.441878][T32121] veth0_vlan: left allmulticast mode [ 711.458282][T32121] ip6erspan0: left allmulticast mode [ 711.928272][T32166] x_tables: ip_tables: ah match: only valid for protocol 51 [ 712.004000][T32173] x_tables: ip_tables: udp.0 match: invalid size 16 (kernel) != (user) 528 [ 712.367490][T32189] wg1 speed is unknown, defaulting to 1000 [ 712.668970][T32209] Bluetooth: MGMT ver 1.23 [ 712.721360][T32208] syzkaller0: entered promiscuous mode [ 712.734461][T32208] syzkaller0: entered allmulticast mode [ 713.274238][T32235] atomic_op ffff88803398d998 conn xmit_atomic 0000000000000000 [ 713.282700][T32238] sch_fq: defrate 4294967293 ignored. [ 713.368299][T32244] x_tables: ip_tables: ah match: only valid for protocol 51 [ 713.377040][T32189] lo speed is unknown, defaulting to 1000 [ 713.758080][T32263] validate_nla: 1 callbacks suppressed [ 713.758103][T32263] netlink: 'syz.4.6653': attribute type 3 has an invalid length. [ 713.794519][T32263] __nla_validate_parse: 13 callbacks suppressed [ 713.794541][T32263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6653'. [ 713.829624][T32265] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6654'. [ 713.896841][T32265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 713.978300][T32270] bridge1: entered promiscuous mode [ 714.482124][T32294] wg1 speed is unknown, defaulting to 1000 [ 714.521981][T32289] xfrm0: entered allmulticast mode [ 714.587740][T32298] geneve4: entered promiscuous mode [ 714.598434][T32304] x_tables: ip_tables: ah match: only valid for protocol 51 [ 714.632007][T23192] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 714.650617][T23192] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 714.683775][T23192] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 714.760050][T23192] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 714.802695][T32304] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6662'. [ 714.998848][T32329] bridge2: entered allmulticast mode [ 715.740883][T32294] lo speed is unknown, defaulting to 1000 [ 715.780113][T23199] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.800103][T23199] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.886163][T23199] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.895113][T23199] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.948791][T32369] tipc: Started in network mode [ 715.967571][T32369] tipc: Node identity 829dd108b444, cluster identity 4711 [ 715.983728][T32369] tipc: Enabled bearer , priority 0 [ 716.058950][T32369] syzkaller0: entered promiscuous mode [ 716.073575][T32369] syzkaller0: entered allmulticast mode [ 716.149194][T32369] tipc: Resetting bearer [ 716.189362][T32365] tipc: Resetting bearer [ 716.237423][T32365] tipc: Disabling bearer [ 716.406819][T32386] x_tables: ip_tables: ah match: only valid for protocol 51 [ 716.462013][T32386] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6681'. [ 716.516811][T32386] FAULT_INJECTION: forcing a failure. [ 716.516811][T32386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 716.588469][T32386] CPU: 1 UID: 0 PID: 32386 Comm: syz.0.6681 Not tainted syzkaller #0 PREEMPT(full) [ 716.588497][T32386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 716.588509][T32386] Call Trace: [ 716.588517][T32386] [ 716.588525][T32386] dump_stack_lvl+0xe8/0x150 [ 716.588554][T32386] should_fail_ex+0x412/0x560 [ 716.588583][T32386] _copy_from_user+0x2d/0xb0 [ 716.588603][T32386] ___sys_sendmsg+0x1c6/0x360 [ 716.588623][T32386] ? __lock_acquire+0x6b5/0x2cf0 [ 716.588646][T32386] ? __pfx____sys_sendmsg+0x10/0x10 [ 716.588699][T32386] ? __fget_files+0x2a/0x420 [ 716.588716][T32386] ? __fget_files+0x3a0/0x420 [ 716.588743][T32386] __x64_sys_sendmsg+0x1bd/0x2a0 [ 716.588766][T32386] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 716.588797][T32386] ? __pfx_ksys_write+0x10/0x10 [ 716.588828][T32386] do_syscall_64+0x14d/0xf80 [ 716.588850][T32386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.588866][T32386] ? trace_irq_disable+0x37/0x100 [ 716.588885][T32386] ? clear_bhb_loop+0x40/0x90 [ 716.588906][T32386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.588923][T32386] RIP: 0033:0x7f520019bf79 [ 716.588938][T32386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.588954][T32386] RSP: 002b:00007f5200ff9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 716.588973][T32386] RAX: ffffffffffffffda RBX: 00007f5200415fa0 RCX: 00007f520019bf79 [ 716.588984][T32386] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000008 [ 716.588996][T32386] RBP: 00007f5200ff9090 R08: 0000000000000000 R09: 0000000000000000 [ 716.589007][T32386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.589018][T32386] R13: 00007f5200416038 R14: 00007f5200415fa0 R15: 00007fffcd545a58 [ 716.589047][T32386] [ 716.837852][T32394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6683'. [ 716.986825][T32394] 8021q: adding VLAN 0 to HW filter on device bond2 [ 717.030608][T32397] tipc: Enabled bearer , priority 0 [ 717.055095][T32398] syzkaller0: entered promiscuous mode [ 717.077265][T32398] syzkaller0: entered allmulticast mode [ 717.184653][T32397] tipc: Resetting bearer [ 717.282211][T32397] tipc: Disabling bearer [ 717.305424][T32422] netlink: 'syz.1.6690': attribute type 10 has an invalid length. [ 717.322108][T32417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6687'. [ 717.333788][T32417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.341701][T32417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.353597][T32417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.381389][T32417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.409671][T32429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6690'. [ 717.458697][T32422] veth0_vlan: left promiscuous mode [ 717.460519][T32431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6690'. [ 717.467625][T32422] veth0_vlan: entered promiscuous mode [ 717.481381][T32422] team0: Device veth0_vlan failed to register rx_handler [ 717.549641][T32435] tipc: Enabled bearer , priority 0 [ 717.576920][T32421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6688'. [ 717.580317][T32439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6693'. [ 717.663719][T32439] vlan3: entered promiscuous mode [ 717.670358][T32439] dummy0: entered promiscuous mode [ 717.677066][T32446] x_tables: ip_tables: ah match: only valid for protocol 51 [ 717.733484][T32433] tipc: Disabling bearer [ 717.783656][T32446] FAULT_INJECTION: forcing a failure. [ 717.783656][T32446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.806873][T32446] CPU: 1 UID: 0 PID: 32446 Comm: syz.3.6695 Not tainted syzkaller #0 PREEMPT(full) [ 717.806898][T32446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 717.806909][T32446] Call Trace: [ 717.806916][T32446] [ 717.806924][T32446] dump_stack_lvl+0xe8/0x150 [ 717.806951][T32446] should_fail_ex+0x412/0x560 [ 717.806977][T32446] _copy_from_user+0x2d/0xb0 [ 717.806996][T32446] __copy_msghdr+0x3c5/0x5b0 [ 717.807020][T32446] ___sys_sendmsg+0x213/0x360 [ 717.807037][T32446] ? __lock_acquire+0x6b5/0x2cf0 [ 717.807057][T32446] ? __pfx____sys_sendmsg+0x10/0x10 [ 717.807102][T32446] ? __fget_files+0x2a/0x420 [ 717.807119][T32446] ? __fget_files+0x3a0/0x420 [ 717.807144][T32446] __x64_sys_sendmsg+0x1bd/0x2a0 [ 717.807165][T32446] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 717.807190][T32446] ? __pfx_ksys_write+0x10/0x10 [ 717.807219][T32446] do_syscall_64+0x14d/0xf80 [ 717.807240][T32446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.807252][T32446] ? trace_irq_disable+0x37/0x100 [ 717.807268][T32446] ? clear_bhb_loop+0x40/0x90 [ 717.807286][T32446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.807300][T32446] RIP: 0033:0x7f05fc99bf79 [ 717.807316][T32446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.807330][T32446] RSP: 002b:00007f05fd816028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 717.807349][T32446] RAX: ffffffffffffffda RBX: 00007f05fcc15fa0 RCX: 00007f05fc99bf79 [ 717.807360][T32446] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000008 [ 717.807371][T32446] RBP: 00007f05fd816090 R08: 0000000000000000 R09: 0000000000000000 [ 717.807381][T32446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.807391][T32446] R13: 00007f05fcc16038 R14: 00007f05fcc15fa0 R15: 00007ffd78d30cc8 [ 717.807418][T32446] [ 718.227689][T32476] netlink: 'syz.2.6702': attribute type 1 has an invalid length. [ 718.271869][T32476] bond3: entered promiscuous mode [ 718.277854][T32476] 8021q: adding VLAN 0 to HW filter on device bond3 [ 718.332284][T32476] bond3: (slave bridge3): making interface the new active one [ 718.387334][T32476] bridge3: entered promiscuous mode [ 718.392877][T32484] RDS: rds_bind could not find a transport for 4004:0:20::, load rds_tcp or rds_rdma? [ 718.421713][T32476] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 718.509235][T32502] syzkaller0: entered promiscuous mode [ 718.546705][T32502] syzkaller0: entered allmulticast mode [ 718.693212][T32509] x_tables: duplicate underflow at hook 1 [ 718.709302][T32513] x_tables: duplicate underflow at hook 1 [ 718.709323][T32495] tipc: Started in network mode [ 718.720551][T32495] tipc: Node identity c2cd63d86ef1, cluster identity 4711 [ 718.738069][T32495] tipc: Enabled bearer , priority 0 [ 718.781401][T32517] tipc: Resetting bearer [ 718.811391][T32485] netlink: 'syz.1.6705': attribute type 1 has an invalid length. [ 718.908879][T32477] tipc: Resetting bearer [ 718.965750][T32477] tipc: Disabling bearer [ 719.149507][T32540] x_tables: ip_tables: ah match: only valid for protocol 51 [ 719.190279][T32533] netlink: 'syz.1.6713': attribute type 1 has an invalid length. [ 719.192972][T32540] __nla_validate_parse: 5 callbacks suppressed [ 719.192989][T32540] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6714'. [ 719.198518][T32533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 719.221027][T32540] FAULT_INJECTION: forcing a failure. [ 719.221027][T32540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 719.270949][T32544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6715'. [ 719.309044][T32540] CPU: 0 UID: 0 PID: 32540 Comm: syz.2.6714 Not tainted syzkaller #0 PREEMPT(full) [ 719.309069][T32540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 719.309081][T32540] Call Trace: [ 719.309088][T32540] [ 719.309096][T32540] dump_stack_lvl+0xe8/0x150 [ 719.309123][T32540] should_fail_ex+0x412/0x560 [ 719.309150][T32540] _copy_to_user+0x31/0xb0 [ 719.309171][T32540] simple_read_from_buffer+0xe1/0x170 [ 719.309201][T32540] proc_fail_nth_read+0x1bb/0x230 [ 719.309226][T32540] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 719.309251][T32540] ? rw_verify_area+0x2a6/0x4d0 [ 719.309269][T32540] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 719.309292][T32540] vfs_read+0x20c/0xa70 [ 719.309310][T32540] ? fdget_pos+0x246/0x320 [ 719.309332][T32540] ? __pfx___mutex_lock+0x10/0x10 [ 719.309355][T32540] ? __pfx_vfs_read+0x10/0x10 [ 719.309376][T32540] ? __fget_files+0x2a/0x420 [ 719.309398][T32540] ? __fget_files+0x3a0/0x420 [ 719.309413][T32540] ? __fget_files+0x2a/0x420 [ 719.309438][T32540] ksys_read+0x150/0x270 [ 719.309458][T32540] ? __pfx_ksys_read+0x10/0x10 [ 719.309487][T32540] do_syscall_64+0x14d/0xf80 [ 719.309506][T32540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.309522][T32540] ? trace_irq_disable+0x37/0x100 [ 719.309539][T32540] ? clear_bhb_loop+0x40/0x90 [ 719.309558][T32540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.309573][T32540] RIP: 0033:0x7f433455c84e [ 719.309590][T32540] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 719.309605][T32540] RSP: 002b:00007f4335424fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 719.309622][T32540] RAX: ffffffffffffffda RBX: 00007f43354256c0 RCX: 00007f433455c84e [ 719.309634][T32540] RDX: 000000000000000f RSI: 00007f43354250a0 RDI: 000000000000000b [ 719.309645][T32540] RBP: 00007f4335425090 R08: 0000000000000000 R09: 0000000000000000 [ 719.309656][T32540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.309666][T32540] R13: 00007f4334816038 R14: 00007f4334815fa0 R15: 00007ffc4db638f8 [ 719.309694][T32540] [ 719.523656][T32544] vlan2: entered promiscuous mode [ 719.529490][T32544] batadv0: entered promiscuous mode [ 719.578236][T32552] can: request_module (can-proto-3) failed. [ 719.738448][T32562] tipc: Enabled bearer , priority 0 [ 719.882765][T32559] syzkaller0: entered promiscuous mode [ 719.892023][T32559] syzkaller0: entered allmulticast mode [ 719.918475][T32559] tipc: Resetting bearer [ 719.997081][T32581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6723'. [ 720.072220][T23199] tipc: Resetting bearer [ 720.091436][T32589] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6726'. [ 720.125972][T32589] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6726'. [ 720.159220][T32589] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6726'. [ 720.192094][T32595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6727'. [ 720.557475][T32558] tipc: Resetting bearer [ 720.794821][T32634] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6736'. [ 720.881026][T32641] netlink: 'syz.3.6737': attribute type 2 has an invalid length. [ 721.135119][T32655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6739'. [ 721.145091][T32654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6740'. [ 723.185191][T32558] tipc: Disabling bearer [ 723.202552][T25523] tipc: Node number set to 920244488 [ 723.213342][T32641] hmac(sha224): entered promiscuous mode [ 723.317073][T32674] wg1 speed is unknown, defaulting to 1000 [ 723.603530][T32694] netlink: 'syz.0.6747': attribute type 83 has an invalid length. [ 724.123996][T32718] wg1 speed is unknown, defaulting to 1000 [ 724.131721][T32674] lo speed is unknown, defaulting to 1000 [ 724.237875][T32727] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 724.323742][T32729] netlink: 'syz.1.6760': attribute type 4 has an invalid length. [ 724.338017][T32729] __nla_validate_parse: 3 callbacks suppressed [ 724.338037][T32729] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6760'. [ 724.378761][T32731] netlink: 'syz.1.6760': attribute type 4 has an invalid length. [ 724.427101][T32731] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6760'. [ 724.476881][T32729] .`: renamed from bond0 [ 724.495113][T32718] lo speed is unknown, defaulting to 1000 [ 724.498824][T32735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6762'. [ 724.660072][T32741] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6763'. [ 724.749008][T32737] tipc: Started in network mode [ 724.753918][T32737] tipc: Node identity , cluster identity 4711 [ 724.781588][T32737] tipc: Failed to obtain node identity [ 724.805138][T32737] tipc: Enabling of bearer rejected, failed to enable media [ 724.830657][T32745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6763'. [ 724.941800][T32737] syzkaller0: entered promiscuous mode [ 724.948070][T32752] nbd: must specify an index to disconnect [ 724.949274][T32737] syzkaller0: entered allmulticast mode [ 725.042331][T32749] netlink: 'syz.4.6766': attribute type 1 has an invalid length. [ 725.201273][T32758] netlink: 'syz.0.6769': attribute type 1 has an invalid length. [ 725.246005][T32758] bond2: entered promiscuous mode [ 725.252210][T32762] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6768'. [ 725.284020][T32758] 8021q: adding VLAN 0 to HW filter on device bond2 [ 725.330459][T32762] 0ªî{X¹¦: renamed from gretap0 [ 725.398072][T32762] 0ªî{X¹¦: entered allmulticast mode [ 725.428956][T32762] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 725.485067][ T301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 725.583679][ T309] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6776'. [ 725.622732][ T308] xt_TCPMSS: Only works on TCP SYN packets [ 725.996756][ T329] netlink: 'syz.3.6784': attribute type 4 has an invalid length. [ 726.269282][ T346] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6790'. [ 726.274820][ T350] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6791'. [ 726.437667][ T361] netlink: 'syz.3.6796': attribute type 1 has an invalid length. [ 726.468521][ T361] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6796'. [ 726.532941][ T372] netlink: 'syz.4.6797': attribute type 3 has an invalid length. [ 726.572026][ T374] syz_tun: entered allmulticast mode [ 726.688426][ T380] netlink: 'syz.3.6801': attribute type 61 has an invalid length. [ 726.709069][ T380] netlink: 'syz.3.6801': attribute type 62 has an invalid length. [ 726.925319][ C0] ------------[ cut here ]------------ [ 726.931324][ C0] ODEBUG: free active (active state 0) object: ffff88805d5fd890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 726.944309][ C0] WARNING: lib/debugobjects.c:615 at debug_check_no_obj_freed+0x405/0x550, CPU#0: modprobe/397 [ 726.954730][ C0] Modules linked in: [ 726.959181][ C0] CPU: 0 UID: 0 PID: 397 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 726.968536][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 726.978637][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 726.985051][ C0] Code: 89 44 24 20 e8 b7 6b 7e fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 6b 27 8c 48 c7 c2 c0 70 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 727.004707][ C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246 [ 727.010802][ C0] RAX: ffffffff8a888d00 RBX: ffffffff9a4efe90 RCX: 0000000000000000 [ 727.019144][ C0] RDX: ffffffff8c2770c0 RSI: ffffffff8c276b40 RDI: ffffffff901b4570 [ 727.027198][ C0] RBP: ffffffff8bcf4a00 R08: ffff88805d5fd890 R09: ffffffff8bcf5d20 [ 727.035243][ C0] R10: dffffc0000000000 R11: ffffffff81b099e0 R12: ffff88805d5fda00 [ 727.043248][ C0] R13: ffffffff901b4570 R14: ffff88805d5fd000 R15: ffff88805d5fd890 [ 727.051386][ C0] FS: 0000000000000000(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 727.060369][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 727.065887][ T407] wg1 speed is unknown, defaulting to 1000 [ 727.067010][ C0] CR2: 00007f278c9bafe8 CR3: 0000000069c68000 CR4: 00000000003526f0 [ 727.080995][ C0] Call Trace: [ 727.084351][ C0] [ 727.087206][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 727.092878][ C0] kfree+0x13a/0x610 [ 727.096842][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 727.102026][ C0] rose_timer_expiry+0x4cb/0x600 [ 727.107057][ C0] call_timer_fn+0x192/0x5a0 [ 727.111672][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 727.117297][ C0] ? call_timer_fn+0xd4/0x5a0 [ 727.122095][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 727.127295][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 727.132516][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 727.138066][ C0] __run_timer_base+0x652/0x8b0 [ 727.142952][ C0] ? ktime_get+0x45/0x200 [ 727.147535][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 727.152941][ C0] ? sched_clock_cpu+0x74/0x440 [ 727.157883][ C0] run_timer_softirq+0xb7/0x170 [ 727.162775][ C0] handle_softirqs+0x22a/0x7c0 [ 727.167630][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 727.172430][ C0] __irq_exit_rcu+0x5f/0x150 [ 727.177105][ C0] irq_exit_rcu+0x9/0x30 [ 727.181376][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 727.187116][ C0] [ 727.190109][ C0] [ 727.193149][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 727.199198][ C0] RIP: 0010:lock_acquire+0x221/0x330 [ 727.204538][ C0] Code: ff ff ff e8 a1 e5 fd 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 1b a3 76 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 00 ca 00 0a cc 48 8d 3d c8 7f 73 [ 727.224690][ C0] RSP: 0018:ffffc90010acf290 EFLAGS: 00000286 [ 727.230788][ C0] RAX: a2a1222176ecc600 RBX: 0000000000000000 RCX: 0000000000000046 [ 727.238842][ C0] RDX: 00000000474a2600 RSI: ffffffff8e151802 RDI: ffffffff8c276500 [ 727.246959][ C0] RBP: ffffffff822182d0 R08: ffffffff822182d0 R09: ffffffff8e880840 [ 727.255016][ C0] R10: ffffc90010acf420 R11: 0000000000000000 R12: 0000000000000000 [ 727.263015][ C0] R13: ffffffff8e880840 R14: 0000000000000001 R15: 0000000000000246 [ 727.271047][ C0] ? kmem_cache_alloc_noprof+0x40/0x650 [ 727.276733][ C0] ? kmem_cache_alloc_noprof+0x40/0x650 [ 727.282321][ C0] ? vm_area_dup+0x2b/0x680 [ 727.286879][ C0] fs_reclaim_acquire+0x71/0x100 [ 727.291840][ C0] ? kmem_cache_alloc_noprof+0x40/0x650 [ 727.297440][ C0] kmem_cache_alloc_noprof+0x40/0x650 [ 727.302851][ C0] vm_area_dup+0x2b/0x680 [ 727.307245][ C0] __split_vma+0x1d5/0xa50 [ 727.311763][ C0] ? __pfx___split_vma+0x10/0x10 [ 727.316767][ C0] ? mas_find+0xb0e/0xd30 [ 727.321128][ C0] vms_gather_munmap_vmas+0x4d0/0x1320 [ 727.326741][ C0] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 727.332667][ C0] ? mas_find+0xa7d/0xd30 [ 727.337067][ C0] mmap_region+0x838/0x1f40 [ 727.341611][ C0] ? trace_contention_end+0x39/0x100 [ 727.346944][ C0] ? __pfx_mmap_region+0x10/0x10 [ 727.351988][ C0] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 727.358648][ C0] ? mm_get_unmapped_area_vmflags+0xd9/0x110 [ 727.365031][ C0] ? cap_mmap_addr+0xaf/0x100 [ 727.369745][ C0] ? bpf_lsm_mmap_addr+0x9/0x50 [ 727.374724][ C0] ? security_mmap_addr+0x71/0x240 [ 727.379869][ C0] ? shmem_mapping+0xd/0x50 [ 727.384411][ C0] ? memfd_check_seals_mmap+0xc5/0x200 [ 727.389919][ C0] do_mmap+0xc39/0x10c0 [ 727.390163][ T407] lo speed is unknown, defaulting to 1000 [ 727.394097][ C0] ? __pfx_do_mmap+0x10/0x10 [ 727.394121][ C0] ? down_write_killable+0x180/0x240 [ 727.394154][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 727.415712][ C0] ? apparmor_mmap_file+0x23e/0x2b0 [ 727.420946][ C0] vm_mmap_pgoff+0x2c9/0x4f0 [ 727.425601][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 727.430744][ C0] ? __fget_files+0x2a/0x420 [ 727.435409][ C0] ? __fget_files+0x3a0/0x420 [ 727.440117][ C0] ? __fget_files+0x2a/0x420 [ 727.444765][ C0] ksys_mmap_pgoff+0x51e/0x760 [ 727.449586][ C0] do_syscall_64+0x14d/0xf80 [ 727.454290][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.460409][ C0] ? trace_irq_disable+0x37/0x100 [ 727.465582][ C0] ? clear_bhb_loop+0x40/0x90 [ 727.470301][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.476247][ C0] RIP: 0033:0x7f278cc8c242 [ 727.480676][ C0] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 727.500749][ C0] RSP: 002b:00007ffe03d7a618 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 727.509210][ C0] RAX: ffffffffffffffda RBX: 00007f278c9a8000 RCX: 00007f278cc8c242 [ 727.517498][ C0] RDX: 0000000000000005 RSI: 0000000000002000 RDI: 00007f278c9a8000 [ 727.525501][ C0] RBP: 0000000000000812 R08: 0000000000000000 R09: 0000000000002000 [ 727.533469][ C0] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffe03d7a668 [ 727.541505][ C0] R13: 00007f278cc61050 R14: 00007ffe03d7aa50 R15: 00000fffc07af4c6 [ 727.549700][ C0] [ 727.552737][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 727.560009][ C0] CPU: 0 UID: 0 PID: 397 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 727.569080][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 727.579130][ C0] Call Trace: [ 727.582444][ C0] [ 727.585295][ C0] vpanic+0x1e0/0x670 [ 727.589285][ C0] panic+0xc5/0xd0 [ 727.593048][ C0] ? __pfx_panic+0x10/0x10 [ 727.597507][ C0] __warn+0x315/0x4a0 [ 727.601496][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 727.607225][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 727.612957][ C0] __report_bug+0x29a/0x540 [ 727.617509][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 727.623388][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 727.629108][ C0] ? __pfx___report_bug+0x10/0x10 [ 727.634137][ C0] ? kfree+0x1c1/0x610 [ 727.638196][ C0] ? rose_timer_expiry+0x4c3/0x600 [ 727.643302][ C0] ? call_timer_fn+0x192/0x5a0 [ 727.648165][ C0] ? __run_timer_base+0x652/0x8b0 [ 727.653181][ C0] ? run_timer_softirq+0xb7/0x170 [ 727.658209][ C0] ? handle_softirqs+0x22a/0x7c0 [ 727.663160][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 727.667924][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 727.673735][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 727.679882][ C0] ? lock_acquire+0x221/0x330 [ 727.684569][ C0] ? fs_reclaim_acquire+0x71/0x100 [ 727.689696][ C0] ? kmem_cache_alloc_noprof+0x40/0x650 [ 727.695246][ C0] report_bug_entry+0x19a/0x290 [ 727.700111][ C0] ? debug_check_no_obj_freed+0x44a/0x550 [ 727.705831][ C0] ? debug_check_no_obj_freed+0x44f/0x550 [ 727.711551][ C0] handle_bug+0xca/0x200 [ 727.715808][ C0] exc_invalid_op+0x1a/0x50 [ 727.720409][ C0] asm_exc_invalid_op+0x1a/0x20 [ 727.725266][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 727.731626][ C0] Code: 89 44 24 20 e8 b7 6b 7e fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 6b 27 8c 48 c7 c2 c0 70 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 727.751257][ C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246 [ 727.757351][ C0] RAX: ffffffff8a888d00 RBX: ffffffff9a4efe90 RCX: 0000000000000000 [ 727.765337][ C0] RDX: ffffffff8c2770c0 RSI: ffffffff8c276b40 RDI: ffffffff901b4570 [ 727.773341][ C0] RBP: ffffffff8bcf4a00 R08: ffff88805d5fd890 R09: ffffffff8bcf5d20 [ 727.781309][ C0] R10: dffffc0000000000 R11: ffffffff81b099e0 R12: ffff88805d5fda00 [ 727.789302][ C0] R13: ffffffff901b4570 R14: ffff88805d5fd000 R15: ffff88805d5fd890 [ 727.797273][ C0] ? __pfx_timer_debug_hint+0x10/0x10 [ 727.802645][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 727.808289][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 727.813929][ C0] kfree+0x13a/0x610 [ 727.817823][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 727.822933][ C0] rose_timer_expiry+0x4cb/0x600 [ 727.827926][ C0] call_timer_fn+0x192/0x5a0 [ 727.832521][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 727.837980][ C0] ? call_timer_fn+0xd4/0x5a0 [ 727.842654][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 727.847772][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 727.852971][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 727.858429][ C0] __run_timer_base+0x652/0x8b0 [ 727.863282][ C0] ? ktime_get+0x45/0x200 [ 727.867623][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 727.873006][ C0] ? sched_clock_cpu+0x74/0x440 [ 727.877853][ C0] run_timer_softirq+0xb7/0x170 [ 727.882703][ C0] handle_softirqs+0x22a/0x7c0 [ 727.887483][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 727.892281][ C0] __irq_exit_rcu+0x5f/0x150 [ 727.896869][ C0] irq_exit_rcu+0x9/0x30 [ 727.901111][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 727.906741][ C0] [ 727.909664][ C0] [ 727.912589][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 727.918563][ C0] RIP: 0010:lock_acquire+0x221/0x330 [ 727.923912][ C0] Code: ff ff ff e8 a1 e5 fd 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 1b a3 76 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 00 ca 00 0a cc 48 8d 3d c8 7f 73 [ 727.943511][ C0] RSP: 0018:ffffc90010acf290 EFLAGS: 00000286 [ 727.949588][ C0] RAX: a2a1222176ecc600 RBX: 0000000000000000 RCX: 0000000000000046 [ 727.957553][ C0] RDX: 00000000474a2600 RSI: ffffffff8e151802 RDI: ffffffff8c276500 [ 727.965523][ C0] RBP: ffffffff822182d0 R08: ffffffff822182d0 R09: ffffffff8e880840 [ 727.973490][ C0] R10: ffffc90010acf420 R11: 0000000000000000 R12: 0000000000000000 [ 727.981458][ C0] R13: ffffffff8e880840 R14: 0000000000000001 R15: 0000000000000246 [ 727.989430][ C0] ? kmem_cache_alloc_noprof+0x40/0x650 [ 727.995002][ C0] ? kmem_cache_alloc_noprof+0x40/0x650 [ 728.000556][ C0] ? vm_area_dup+0x2b/0x680 [ 728.005055][ C0] fs_reclaim_acquire+0x71/0x100 [ 728.009986][ C0] ? kmem_cache_alloc_noprof+0x40/0x650 [ 728.015536][ C0] kmem_cache_alloc_noprof+0x40/0x650 [ 728.020921][ C0] vm_area_dup+0x2b/0x680 [ 728.025335][ C0] __split_vma+0x1d5/0xa50 [ 728.029762][ C0] ? __pfx___split_vma+0x10/0x10 [ 728.034706][ C0] ? mas_find+0xb0e/0xd30 [ 728.039060][ C0] vms_gather_munmap_vmas+0x4d0/0x1320 [ 728.044536][ C0] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 728.050468][ C0] ? mas_find+0xa7d/0xd30 [ 728.054804][ C0] mmap_region+0x838/0x1f40 [ 728.059330][ C0] ? trace_contention_end+0x39/0x100 [ 728.064616][ C0] ? __pfx_mmap_region+0x10/0x10 [ 728.069694][ C0] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 728.076280][ C0] ? mm_get_unmapped_area_vmflags+0xd9/0x110 [ 728.082252][ C0] ? cap_mmap_addr+0xaf/0x100 [ 728.086924][ C0] ? bpf_lsm_mmap_addr+0x9/0x50 [ 728.091859][ C0] ? security_mmap_addr+0x71/0x240 [ 728.096988][ C0] ? shmem_mapping+0xd/0x50 [ 728.101490][ C0] ? memfd_check_seals_mmap+0xc5/0x200 [ 728.107032][ C0] do_mmap+0xc39/0x10c0 [ 728.111192][ C0] ? __pfx_do_mmap+0x10/0x10 [ 728.115776][ C0] ? down_write_killable+0x180/0x240 [ 728.121077][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 728.126705][ C0] ? apparmor_mmap_file+0x23e/0x2b0 [ 728.131902][ C0] vm_mmap_pgoff+0x2c9/0x4f0 [ 728.136496][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 728.141708][ C0] ? __fget_files+0x2a/0x420 [ 728.146320][ C0] ? __fget_files+0x3a0/0x420 [ 728.150994][ C0] ? __fget_files+0x2a/0x420 [ 728.155585][ C0] ksys_mmap_pgoff+0x51e/0x760 [ 728.160434][ C0] do_syscall_64+0x14d/0xf80 [ 728.165032][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.171099][ C0] ? trace_irq_disable+0x37/0x100 [ 728.176140][ C0] ? clear_bhb_loop+0x40/0x90 [ 728.180989][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.186875][ C0] RIP: 0033:0x7f278cc8c242 [ 728.191284][ C0] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 728.210891][ C0] RSP: 002b:00007ffe03d7a618 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 728.219308][ C0] RAX: ffffffffffffffda RBX: 00007f278c9a8000 RCX: 00007f278cc8c242 [ 728.227289][ C0] RDX: 0000000000000005 RSI: 0000000000002000 RDI: 00007f278c9a8000 [ 728.235348][ C0] RBP: 0000000000000812 R08: 0000000000000000 R09: 0000000000002000 [ 728.243317][ C0] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffe03d7a668 [ 728.251311][ C0] R13: 00007f278cc61050 R14: 00007ffe03d7aa50 R15: 00000fffc07af4c6 [ 728.259300][ C0] [ 728.262799][ C0] Kernel Offset: disabled [ 728.267116][ C0] Rebooting in 86400 seconds..