last executing test programs: 3m2.489518609s ago: executing program 2 (id=6758): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write(r0, &(0x7f0000000000)="2e000000010001", 0x7) 3m1.55314427s ago: executing program 2 (id=6762): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x4001, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0xa, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000000, 0x1000, 0x5915, 0x10001, 0x9]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x6, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000008ac0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) 3m1.032955165s ago: executing program 2 (id=6765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31", 0x24}, {&(0x7f0000000c00)="4307ed2e30289136978dc4d5a20c9e7a67bdfcf940a895615444ab996aa0b5790ba67b6f02163711012bbe394a31f069e4004dcdb9a63024498415203b20f5c552871356a8facaa27672f855eab06db5d63d044eb469140ec22066aa7aa8e0c6882c425bb2c317f6a9f43ee268f59fa326ec8f97ccdc8c9011c8f875df1544424ef14d67f3921a11b14ca767f628f7155b1b35173ed2e8203542302ff11f8031a0ff43d45cd71cc9c1f918bb866f355fd80dde968a664fe8237b47862c58a92054336dc4b2779e9bd77fef23120ee74b97cc57fc973e06a9433361d4d1345361268b7bab68267a7c8a4e36c450428a880df317ebed65e56aae55319b5fff80598f0f4a368b37f9bd68e07a60fe9958f7435d189c323ca7ae6b51109b9c70b536079125fdd1d0d3faaa4ca81a0396120608ed384a7b656687aabf52090b2fc10a4e11a8199241092af5d13c2bc02330a322eaabbed4ba1331c640c118963a50bec5bc8613739645d6ec4e4f4c081b7277efb0b12fae2c3ddde63c54cd0ab1e151624ba7c92d232fb544e9d83d0c5acf3fa5859e447e61d9085a969e2b196baa560b416c3fc461acff2ead6ce48437706711d25be57ecc5e98e83bface32963211f4305efe9f1ac7329ca1ffa0d8af05db6f475adc7cb5f0032bb33d3c725d8b072cbad9373bc98df9ca82bd059ea7713070c7b4d8bbdb4cc6675c389660008f0157f4849d0eef8d6e9c77c2591537e28a41600e398be8e3549c0dfa089ae61a58c0e4f1d84c8166ca84d4a8bd1d15d4dba162822c147d25fce8e44082aeac83358aea6880f363b99f641afdb496b8962ce0220350", 0x254}], 0x2}, 0x4) 2m58.658819757s ago: executing program 2 (id=6767): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x40850, &(0x7f00000001c0)={0x11, 0x86dd, r5, 0x1, 0xd8, 0x6, @random="030000000102"}, 0x14) 2m58.152452524s ago: executing program 2 (id=6768): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000200000000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) socket$inet(0x2, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000440)="5800000014001d2340834b80040d8d560a067ee500ff000000000000000058000b4824ca945f64009400140425010ebc000000000000008000f0fffeffe809005300fff5dd80000010000100080c10000000000000000100", 0x58}], 0x1) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000580)={@private2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x930311}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0x3f}, @loopback, 0x6, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200}) 2m57.812009104s ago: executing program 2 (id=6770): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@bridge_getneigh={0x54, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2002a}, [@IFLA_VF_PORTS={0x34, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "35b09c8913d4e54116b80106a24c0986"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a86aa2ba3d5b61023bf6361a435c368c"}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044840}, 0x20000800) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0xfffc}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x18) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x20, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0xb}, {0xb, 0xffff}, {0xa, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) bind$xdp(r3, &(0x7f0000000140)={0x2c, 0x4, r7, 0x12}, 0x10) listen(r4, 0xfffffffd) r8 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) sendmsg$unix(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="4f5f072a0db0e67d613178efcfe3a6054a0ca7f8e4cef47737bbc530093b9307b2828900b1ed8131e71b43e3909b35fa0a1964d2e1739c46bbb5732e95ad8ae39b90c89cb5cf53c25512e3668ede45982f290503f507caad3499871769e7e2827220fa5158dc339619beea2c86a2a170d62d9f5820dcbf21cecf5e9a51ca518d13237fa5d734cd6e23dd8d7cdbf2477f8cb68f0fc0417a10d062b49bebb3a9bf0293987ba25e78a53eb71c450e7dd594ae8635a37ffd177a864bcf517989c49ea7e621e4c67099b64f91a475dcc1de7aae52dfaf5a2e6afc425f6f32a82f720a6e95b8f001b2156a001bcba8e6077d139770ff8685", 0xf5}], 0x1, 0x0, 0x0, 0x20000800}, 0x20040000) 2m57.402879922s ago: executing program 32 (id=6770): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@bridge_getneigh={0x54, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2002a}, [@IFLA_VF_PORTS={0x34, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "35b09c8913d4e54116b80106a24c0986"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a86aa2ba3d5b61023bf6361a435c368c"}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044840}, 0x20000800) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0xfffc}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x18) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x20, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0xb}, {0xb, 0xffff}, {0xa, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) bind$xdp(r3, &(0x7f0000000140)={0x2c, 0x4, r7, 0x12}, 0x10) listen(r4, 0xfffffffd) r8 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) sendmsg$unix(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="4f5f072a0db0e67d613178efcfe3a6054a0ca7f8e4cef47737bbc530093b9307b2828900b1ed8131e71b43e3909b35fa0a1964d2e1739c46bbb5732e95ad8ae39b90c89cb5cf53c25512e3668ede45982f290503f507caad3499871769e7e2827220fa5158dc339619beea2c86a2a170d62d9f5820dcbf21cecf5e9a51ca518d13237fa5d734cd6e23dd8d7cdbf2477f8cb68f0fc0417a10d062b49bebb3a9bf0293987ba25e78a53eb71c450e7dd594ae8635a37ffd177a864bcf517989c49ea7e621e4c67099b64f91a475dcc1de7aae52dfaf5a2e6afc425f6f32a82f720a6e95b8f001b2156a001bcba8e6077d139770ff8685", 0xf5}], 0x1, 0x0, 0x0, 0x20000800}, 0x20040000) 7.814185425s ago: executing program 4 (id=7488): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) writev(r1, &(0x7f00000007c0)=[{&(0x7f0000000a00)="7618", 0x2}], 0x1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x400004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2b}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap(&(0x7f00004e0000/0x3000)=nil, 0x3000, 0x1000002, 0x8031, r1, 0x2000) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003000000000009500000000000000db74589d4b38cc306ac390649f8edea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475be393b1f1e4aba75a0750472719cc516eec8b02df8ef39db6e67fa14b769e7f385ba72c64242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba7000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb1, &(0x7f000000cf3d)=""/173, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x53) 6.946470929s ago: executing program 3 (id=7491): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000002060101000000000300000000000000050005000a001800050001000700000005000400030000000900020073797a310000000011000300686173683a6e"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) read(r3, &(0x7f00000000c0)=""/81, 0x51) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x48, 0x1410, 0x4, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x1) setsockopt$inet_tcp_int(r0, 0x29, 0x8, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/ipc\x00') r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8924, &(0x7f0000001300)={'nr0\x00'}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) unshare(0x6a040000) r7 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r7, 0x61d9, &(0x7f0000000000)) socket$pppl2tp(0x18, 0x1, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000100), 0x1001) pread64(r8, 0x0, 0x0, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) 6.838294688s ago: executing program 4 (id=7494): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 5.832967895s ago: executing program 1 (id=7499): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xffe0, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001200)={0x0, @in6={{0xa, 0x4e20, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x5f6}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0600"/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000010000000100"/28], 0x50) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2}]}}]}, 0x48}}, 0x0) 5.290843247s ago: executing program 1 (id=7502): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8011) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001780)=[{0x0}], 0x1}, 0x4000080) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r6, {0x4, 0x2}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x20040054) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) unshare(0x10800) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x7000000}, @TCA_FQ_FLOW_REFILL_DELAY={0x1027, 0x9, 0x3}]}}]}, 0xa2}}, 0x0) 5.022755327s ago: executing program 1 (id=7503): socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x25c, 0x801, 0x0, 0x8, 'syz1\x00'}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f0000000580)="c02cbc10cf8591fbd3a49ffec679249ba739acd033ccd4b06228e1b005510de4e33cfd28380e0860435aac2fb5445b5e05be7a368584a6666dd9b9ec99d29fec9e2d659eaf37e88c608386b0192dc6935b2cc98c9a4f4e0e82c6efdb1264f989d0304e01d1a68bbf7a50f46c73d8b59f25aefe64df7ba8f714f61a04e67f78f5a9859d278b317e8d63bc3c4cfa4001d38f27b66656db8d6b660f02562c446cc0588ee7c0bbf2806dd52646f384b080043ad0d0399ecc5f9a7025863ec9bab0129415a5d37db647114a78c15cc31e604e482659478c7926af042c031ce3c7438682323724873a", &(0x7f0000000780)=@buf="3db386608e85834dbd7f98e6a4ec8720b33280c66006499c82b370ce12fa7ae491b3f5e0c4aa7d8694c21dc0d2899bbbafd252049f5d6ab8176405d595867880a8aedfc3128eb43655198eed8fda045d629a9c161abe5936af15cdfa6bef00bc1ced1ab5345325e026caa4c2b84035e11afa485ecb0949771f3ac906ff4e98c985a7cade5d138d756be369d95782fcb57b18a29007be823319ae86f1afc1172087f5fb1c38f8810beeb36601b01ef01f8f910075282eb10fe8e008abc8f15ff56b", 0x1}, 0x20) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c000000ac91dfe4568b0f6ff8fa842be8490ea130a36db2ecc553721e", @ANYRES16=r6, @ANYBLOB="170900100000fedbdf25010000000500070000000000080009000000000008000a0000000000060002000100000014001f00ff0100000000000000000000000000011400200000000000ffff0000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f00000001c0)=0x4, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) r8 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x54, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x20010, r7, 0x0) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000300)=0xa, 0x4) close(0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100)) 4.659252591s ago: executing program 5 (id=7505): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a84d", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000000)={0x24, @long}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000000100), 0x0, 0x726, 0x7) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x802, 0x1800000000000000) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88afa5b4, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x3c}}, 0x0) socket$alg(0x26, 0x5, 0x0) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000e00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="5ced1a9ed4e19044b2e1d182e389e0395bb14472b95056fa0df9e8a891b12197cd2d7e1b049a5d7b9d9423601188014c2d6f2afe609464032d78738a390c1e8320cc6798f9776e46c9561cf666a7bf2c28c03f0847fd8aa908d420a2dbcd7fe68a95e0b9349c334f065ed1814e4e61b3846d8729"], 0x3c}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) sendmsg$AUDIT_USER(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)={0xf8, 0x3ed, 0x100, 0x70bd2d, 0x25dfdbfe, "0f772360d4ddad4f929e412f72f34d0a818fc426dc4560f5e3d113210528151e8c464be2a6089fa5f93a02e46cca23c18f58e5eb9b3cdf38e4232fa0f1de1cf7dca2b97ad1a37f0bb784238d06080d189bd1a3c5baaf0c759cf0867f420f9470f556397d60fad1623232d5e327354da1aa67c166208341fc2b2e65917827fec5b657f45260c0fefe254a5b82abe2a68b00286b9113e1700aa4db1112d19c829b56b2996d0958f939a884af5d11ca8e218f091e948b2a9ef4dec1d628bbc7ced191418feb1aac033f8dde4f48e478dbf5420f4156bd955f1be806b92bbd7a1cfbd04b6459d6f117", ["", "", "", "", ""]}, 0xf8}, 0x1, 0x0, 0x0, 0x81}, 0xc4) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)=0x5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 4.251517689s ago: executing program 4 (id=7506): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r0, 0x8, 0x0, 0xa0000, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x80, 0x0, 0xa0c, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x45}}}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0xd9, 0x1}, {0x0, 0x3}, {0x8, 0x6}, {0x7e, 0x7}], "c00b4f7168984363"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0xd7, 0x2}, {0x8, 0x3}, {0x0, 0x5}, {0x1, 0x6}, {0x4, 0x1}, {0x50, 0x1}, {0xac, 0x7}, {0xd}, {0x3, 0x2}, {0x81, 0x2}, {0x20, 0x7}, {0x6f, 0x2}, {0x8, 0x4}, {}, {0x81, 0x2}], "20572f23217c061c"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x9, 0x2}, {0x2}, {0x0, 0x4}, {0xc2}, {0x6, 0x1}, {0x0, 0x2}], "2840c26f1d3ca129"}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r7, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x3c, r11, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfa}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xd5dd}]}, 0x3c}}, 0x0) 4.232341276s ago: executing program 0 (id=7507): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000600)="12df0751087e8e2ce81e19f0cc559a38f4cf5ed097c8d3420200000053c2a54dca62dc094a6eba9e55c3bfdecf2d40dbbf8eb736f5e77231d426a2ded7f9ee4f541b56e43fb0ae2d3f5ff3783f11f14b19df215f9f3fdca551500406489c683544f5d91d95fafc4cc655ec65efdc86206cfe724fb84d10a54d64c7bb541aef652aa7af8f9bd8192d74202b836cf8280b78fa53de29b112243775a6fd314d93e4efabddd6d905b7bd1ca68eff19000000", 0xb0, 0x20000000, &(0x7f0000000400)={0xa, 0x4e20, 0x973f, @private1, 0x6}, 0x1c) shutdown(r0, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x8}}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@empty}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x2, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) socket(0x200000000000011, 0x2, 0xd) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x3) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r10, {0xe, 0x7}, {0x0, 0xfff1}, {0xfff3, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 3.722509415s ago: executing program 0 (id=7508): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x18, r0, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x2000c050) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(r2, &(0x7f00000007c0)=[{&(0x7f0000000a00)="7618", 0x2}], 0x1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2b}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap(&(0x7f00004e0000/0x3000)=nil, 0x3000, 0x1000002, 0x8031, r2, 0x2000) shutdown(r2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003000000000009500000000000000db74589d4b38cc306ac390649f8edea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475be393b1f1e4aba75a0750472719cc516eec8b02df8ef39db6e67fa14b769e7f385ba72c64242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba7000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb1, &(0x7f000000cf3d)=""/173, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x53) 3.700453462s ago: executing program 4 (id=7509): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write(r0, &(0x7f0000000000)="2e000000010001", 0x7) 3.524004933s ago: executing program 3 (id=7510): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x3c, r10, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfa}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xd5dd}]}, 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, 0x0, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 3.386418207s ago: executing program 5 (id=7511): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'gre0\x00'}) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r10) r11 = socket(0x840000000002, 0x3, 0x100) connect$inet(r11, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r11, &(0x7f0000005240), 0x4000095, 0x0) 3.071382611s ago: executing program 3 (id=7512): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) socket$inet(0xa, 0x801, 0x84) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r2, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x5c, &(0x7f00000002c0)=ANY=[@ANYBLOB="a9000000000800000100004000000000310dee6710b7c30030246f4b87595042b4a02d5bb1db718b3eb14c03c22cb435f0e179cb5ad476155f63ac7da8227fe43adc65377c811dbdd197dbd62f9afaa172ade411e9c0ade4225cc3ab21869bdc6b7164"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x6c, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xe, 0xd}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d04e}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7}]}}, @filter_kind_options=@f_flow={{0x9}, {0x6c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x5317}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8e5af3a2eb153b3b}, 0x48010) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 2.735067294s ago: executing program 0 (id=7513): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8011) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001780)=[{0x0}], 0x1}, 0x4000080) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r6, {0x4, 0x2}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x20040054) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) unshare(0x10800) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x7000000}, @TCA_FQ_FLOW_REFILL_DELAY={0x1027, 0x9, 0x3}]}}]}, 0xa2}}, 0x0) 2.666562635s ago: executing program 1 (id=7514): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1000}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x5}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x7, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x1, 0x3, 0x0, 0xc, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x94) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "08e48ff0bf597edc"}, 0x28) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000085000000000000000000000000000000000000000000000000000000003e7dfffff08300008a00000000000000010000000000000049060000000000000400000000000000000000000000000000000000000000000000000000000000b5ca000000ffffff070000000000000000000000000000000700000000000000fd0300"/192]) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x1c, r3, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @local}]}}}]}, 0x54}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) 2.649043491s ago: executing program 4 (id=7515): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x2004}) epoll_wait(r5, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, 0x0, 0x2000c800) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb4, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb4}, 0x1, 0x0, 0x0, 0x810}, 0x0) recvmsg(r0, &(0x7f0000001840)={&(0x7f00000018c0)=@generic, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000480)=""/185, 0xc5}, {&(0x7f00000005c0)=""/19, 0x29}, {&(0x7f0000000600)=""/104, 0x68}, {&(0x7f0000000680)=""/255, 0xff}, {&(0x7f0000001880)=""/15, 0x14}], 0x6, &(0x7f0000000840)=""/4096, 0x1000}, 0x142) bind$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r6, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)='z', 0x1}], 0x1}}], 0x1, 0x4004004) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20040080) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001940)=@newlink={0x29c, 0x10, 0x403, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x647e4, 0x64da0}, [@IFLA_VFINFO_LIST={0x26c, 0x16, 0x0, 0x1, [{0x7c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x7, 0x3}}, @IFLA_VF_VLAN={0x10, 0x2, {0x2, 0x964, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1, 0x5}}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0x5, 0x4}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0x8}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0x2}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4, 0x4}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3, 0x3}}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xc, 0xc93f}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xae3c, 0x8}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x6}}]}, {0x9c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xff, 0x7ff}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x67, 0x7}}, @IFLA_VF_RATE={0x10, 0x6, {0x2, 0x401, 0x40}}, @IFLA_VF_MAC={0x28}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x7ff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x95, 0x4}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xa2000000, 0x9}}, @IFLA_VF_VLAN={0x10, 0x2, {0x5207, 0xba0, 0xe}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x9, 0xc83, 0x2}}, @IFLA_VF_RATE={0x10, 0x6, {0x2, 0x38000, 0xe9}}]}, {0x100, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x9, @random="4616a91790cf"}}, @IFLA_VF_RATE={0x10, 0x6, {0x200, 0x8, 0x12}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffffd, 0x3}}, @IFLA_VF_MAC={0x28, 0x1, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x2d07, 0x7fff}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0xfff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x2}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xe, 0x7a3, 0x3, 0x88a8}}, {0x14, 0x1, {0x6, 0xe42, 0x1, 0x8100}}, {0x14, 0x1, {0xfff, 0x5b8, 0x0, 0x8100}}, {0x14, 0x1, {0x3ff, 0x50d, 0x200, 0x88a8}}]}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x6, 0xfffffff7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3, 0x78}}]}]}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x29c}, 0x1, 0xba01}, 0x0) socket$kcm(0x10, 0x3, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x20900, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='xprtrdma_op_set_cto\x00', r9, 0x0, 0x5}, 0x18) 2.421290124s ago: executing program 5 (id=7516): r0 = socket(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdbfe}, 0x10}}, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040020000010000000", @ANYRES32=r11, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000080", @ANYRES32=r11, @ANYBLOB="14000500fe80"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r11, @ANYBLOB="14000500fe80917a952a643f152befd0599ecd85f55afcd7d85070a802fc3c9b75011f7bb27cfa7e4e"], 0x3c}}, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x600000b, 0x6e071, 0xffffffffffffffff, 0x80000000) 1.830895819s ago: executing program 0 (id=7517): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000006, 0x42073, 0xffffffffffffffff, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x5c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7ff}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3cb2}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7fffffff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x5}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r3 = accept4(r1, &(0x7f0000000280)=@nl, &(0x7f0000000200)=0x80, 0xa5df2de2f9b0757f) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd2d, 0x0, {0x2, 0x20, 0x14, 0x0, 0x3, 0x2, 0xfe, 0x7, 0x1300}}, 0x1c}}, 0xea5bc50b619d97ea) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0xc000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000740)=@delqdisc={0x24, 0x25, 0xa56466bb37021e12, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0xffe0}, {0x10, 0xd}, {0xffff, 0x5}}}, 0x24}}, 0x2000c841) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8002}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x80}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x60}}, 0x0) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x10) bind$can_raw(r9, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, 0x0, 0x0) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x4, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r10 = socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x128, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@TCA_STAB={0x104, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x84, 0x3, 0x825, 0x3, 0x0, 0x80000000, 0x9, 0x6}}, {0x10, 0x2, [0x69a, 0x6, 0x6, 0x1, 0x8e2, 0x8]}}, {{0x1c, 0x1, {0x0, 0x48, 0x4, 0x0, 0x0, 0x96, 0x0, 0x8}}, {0x14, 0x2, [0x6, 0xfffa, 0x6, 0x4, 0x3, 0x9, 0x0, 0x0]}}, {{0x1c, 0x1, {0x3, 0x4, 0x7ff, 0x3, 0x1, 0x1, 0x9, 0x4}}, {0xc, 0x2, [0x80, 0x4, 0x9, 0x8]}}, {{0x1c, 0x1, {0xe, 0x2, 0x2, 0xa, 0x1, 0x0, 0x2, 0x5}}, {0xe, 0x2, [0x7, 0x100, 0x1, 0xa0, 0x2]}}, {{0x1c, 0x1, {0x3, 0x48, 0xe544, 0x10001, 0x0, 0xffffffff, 0x7, 0x3}}, {0xa, 0x2, [0x5, 0xfffd, 0x0]}}, {{0x1c, 0x1, {0x9, 0x8, 0x0, 0x77a2, 0x0, 0x4, 0x3, 0x3}}, {0xa, 0x2, [0x88, 0x40, 0x73]}}]}]}, 0x128}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x88, 0x2c, 0xe27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r11, {0xc, 0xc}, {}, {0x5, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x7}}, @filter_kind_options=@f_cgroup={{0xb}, {0x50, 0x2, [@TCA_CGROUP_POLICE={0x0, 0x2, [@TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x1009}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8004}, 0x20040054) 1.815546244s ago: executing program 3 (id=7518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x61}, 0x4010004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.499081592s ago: executing program 1 (id=7519): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='mem_disconnect\x00'}, 0x18) socket(0x10, 0x803, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) r1 = socket(0x15, 0x5, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x10001, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010003005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x9, &(0x7f0000000500)=0x81, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd24, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x23c}, @device_b}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008050}, 0x10804) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x844}, 0x800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010) socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llx, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x44}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) 1.39145593s ago: executing program 5 (id=7520): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f00000012c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4845}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6gre0\x00'}}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x30, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x25, 0x1, 0x60, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback={0x0, 0x460c6}, 0x1, 0x0, 0x25a1, 0x40}}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002bbd7000fbdbdf25210000000800", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00@\x00\x00\x00\x00'], 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007ec0)=[{{&(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x41}}, 0x4, 0x2, 0x0, 0x3}}, 0x80, 0x0}}], 0x1, 0x0) 1.199083773s ago: executing program 0 (id=7521): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a84d", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000000)={0x24, @long}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000000100), 0x0, 0x726, 0x7) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x802, 0x1800000000000000) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88afa5b4, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x3c}}, 0x0) socket$alg(0x26, 0x5, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000e00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="5ced1a9ed4e19044b2e1d182e389e0395bb14472b95056fa0df9e8a891b12197cd2d7e1b049a5d7b9d9423601188014c2d6f2afe609464032d78738a390c1e8320cc6798f9776e46c9561cf666a7bf2c28c03f0847fd8aa908d420a2dbcd7fe68a95e0b9349c334f065ed1814e4e61b3846d8729"], 0x3c}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) sendmsg$AUDIT_USER(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)={0xf8, 0x3ed, 0x100, 0x70bd2d, 0x25dfdbfe, "0f772360d4ddad4f929e412f72f34d0a818fc426dc4560f5e3d113210528151e8c464be2a6089fa5f93a02e46cca23c18f58e5eb9b3cdf38e4232fa0f1de1cf7dca2b97ad1a37f0bb784238d06080d189bd1a3c5baaf0c759cf0867f420f9470f556397d60fad1623232d5e327354da1aa67c166208341fc2b2e65917827fec5b657f45260c0fefe254a5b82abe2a68b00286b9113e1700aa4db1112d19c829b56b2996d0958f939a884af5d11ca8e218f091e948b2a9ef4dec1d628bbc7ced191418feb1aac033f8dde4f48e478dbf5420f4156bd955f1be806b92bbd7a1cfbd04b6459d6f117", ["", "", "", "", ""]}, 0xf8}, 0x1, 0x0, 0x0, 0x81}, 0xc4) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)=0x5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.141314942s ago: executing program 3 (id=7522): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x1000000000000007, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x20000000) r2 = accept4(r0, 0x0, 0x0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x20}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0xe}, @FRA_DST={0x14, 0x1, @loopback}, @FRA_DST={0x14, 0x1, @mcast2}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054) setsockopt(r3, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) socket$l2tp(0x2, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000008c0)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}, @in6={0xa, 0x4e21, 0x2, @loopback, 0xf}, @in={0x2, 0x4e22, @private=0xa010102}, @in6={0xa, 0x4e21, 0x8f5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in={0x2, 0x4e21, @multicast1}], 0x78) sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="78d8f92dbf64605cdd118f48e23e98c60b7983beb3470e13d6338b8e1a1ea1772acf", 0x22}, {&(0x7f0000000080)="e14375812493b65c2cad3ff10481890666d248ff8de5efc72ff8a889f410bf2d1cfe7fbcc29d8f00562ade8a67c72c62c75b7ad335433396c4a0426291511a71a555255111756d1efcc23af35c5bf5d07a514f298928a735c26be2e53e0fff4ee7b3ffbff554b6077cf87d9e11f3c32b9af89abef7d65ea80e787a55018b2e45db7a5fec803c7c0da148d37e95e8be15f7fd1cffeb7a897f1896b96b286b56a52c34ebc1631b116f88bc7dc2c97a577284031c913339227f53553945bf818031e4200d5328d1e92a16869713ffdef988acbff08f5e20032d42677fac", 0xdc}, {&(0x7f0000000180)="ae352ad209582c3ace556142a1327be3b135502feb930bde", 0x18}, {&(0x7f0000000200)="5ee18776dff5442ac20ae821cab7d227f6dfe3ed2d342b5a0da2be4451ad98ecefa0c55a2e4d16079634b4e22fd0afb785becaa7f11ac89dfd09ce9fb78deb1b1817dc56969feb31bf105aad559cf4874dfdf97d18bb7604a817da44c90e1ed930f33efee3984ad2f52e8e3237d76bf98d38795b398bc15b", 0x78}, {&(0x7f0000000540)="95d13135e218eabf70ac850a7e6dd6a25f634b76def4fef822c10a47fbfaa5bde00365452f79ba250e3bfd3df858a8e92d9e3535168dbf6cac790e4d1fa9ef65299355d0c75799e75c90fec701ad8f89c3b115d17beb8e6e6716bb1d646bcca45485a11272d312c6bb1b36aea56f0e24830676bf6b733175cfcf1b19dd6a7a85f523f8e348f9128a4ef48f560a8e0a1b9ff73a04699e6645f0f670b25e3ae799f7a2ee4fd95e80e00189dc7d93e1e4cca9c8ce4ca7ee203c3155b3623ee24e995dd42e67d22f5eb7f766567a247a0f981782f525b126919b9b0adeadff07f29ce8c874", 0xe3}, {&(0x7f0000000640)="1dcbc85af9feec85cdaa90a1f6bb5eca3475c705496a92d182147efa66cf148382493989558a401839427396285c136c7fb1ebd274e08452a219d6f628ebb9408650139466606c4c0b1a2bfeff287f23d5151bdeb54e8d21e2d1916360a117fbcbcf6cfa61c24dde9f441b300f4e4d66698caa882bf762bfa566e76cbf8e4bd1ed199dacf2367d50ec09216127e9e5f168fb85d01333cba55a89ad021e0c79d79b9ccb75fb50059fcd959664abb5600ac38d", 0xb2}], 0x6, &(0x7f0000000700)=[@assoc={0x18, 0x117, 0x4, 0x46208000}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x80}, 0x4004080) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) 549.475853ms ago: executing program 4 (id=7523): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x18, r0, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x2000c050) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(r2, &(0x7f00000007c0)=[{&(0x7f0000000a00)="7618", 0x2}], 0x1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2b}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap(&(0x7f00004e0000/0x3000)=nil, 0x3000, 0x1000002, 0x8031, r2, 0x2000) shutdown(r2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003000000000009500000000000000db74589d4b38cc306ac390649f8edea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475be393b1f1e4aba75a0750472719cc516eec8b02df8ef39db6e67fa14b769e7f385ba72c64242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba7000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb1, &(0x7f000000cf3d)=""/173, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x53) 321.601411ms ago: executing program 5 (id=7524): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xffe0, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001200)={0x0, @in6={{0xa, 0x4e20, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x5f6}, 0x8) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0600"/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000010000000100"/28], 0x50) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2}]}}]}, 0x48}}, 0x0) 287.854423ms ago: executing program 1 (id=7525): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write(r0, &(0x7f0000000000)="2e000000010001", 0x7) 131.003937ms ago: executing program 5 (id=7526): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000240)="f5bf144903825c82065ce946d89061b5eb83b9804078a4a730c7df9f681115cd99b59226e4baa90a1865df78cf52251836f77cd4d6aeb384eea607d2c9098cbed416aa2a7b496fa49bebbae79d109d2b67c90978cc0ce75c8578", 0x5a}, {&(0x7f00000002c0)="a56f3132f2c9bac74ba5f443f2b0a0ee93fbd5a4ea67e2563a54e1005bef23e7957fa5f695ee8a222dae4dcfc965d1845a5aa44c03b9d4e8468958d7c7c50fe1c832c787ef9cdf77820f5c76e4000fb1bb9c637db7548b5713b98a02b82c06fbc737fdc8b2ef867abf12", 0x6a}, {&(0x7f0000000340)="207046ba8517f1f68bcd5c48e98cbf5da50618ef91cb73ccbba141150256f3f86bfeec1482bf1f439d60cb48a75ca2b615234066343c44fe3ac951979e23a22889f8a0d0743c789f09a4748f9089528d4eb9b1cb3ff04c6be210f1586f91fe72516eba38995d6ec168d8bc71bc7a835a00e6943f53b720f1c03107", 0x7b}, {&(0x7f0000000400)="1345d3e79ac527424c7b2e0f38d394b902519621218f049fae330e4f80bd542a3d011cc5be7668d156344e7b31415434207fafc07f493a839e81bef07d76fa4c242baa39446aab197729eda61243bfad95d0454ad26ef2c39c4b4410848c1cd42c6f67f9a1c4de231a2aea99ed85157f3f9da9abb543e5ec19f5fe242ded8d38ec0be181386844f01080f60b68e4088ce532d8bb31964a6fdd4bccbb95b9161cbd4a5ef9c26a0a46c2d5474f38ae12a7b87ca213ccfe52639d9addef7b7219d2a7ce53aff6ff3bafb9189e98a601bb2b0f94a958d2d19db44478bc106a8d6e42df21aaefdb10815b285f", 0xea}, {&(0x7f0000000500)="fe4621c75dd9e5a97add7aefc54e892a27c8755d166b9303037884e4dbf3fb286fd2a69fa66cb8a244d03fa82cf4fe615eebcab07e256dcfd414f245b606d7580c7c2840e72b970f2d1b03bd101bec8bcf6cbcfd29f77bcd66a6c0fc6d502995eda82c3feee57285e95fef0b28cadb390d186397fcb29b84264ff31e8c6f2ba50332126a1bf98a264f11aeed7ffb6ff448296283f87291f13f9bbcb3de04dfed60b5142789ea590448c4bbd51090a8c70547854439bd2fceeb214c270951c882ccb6dfcfadd1", 0xc6}, {&(0x7f0000000600)="ff2deae3458e0abdc5049d4349fe5cb68b12c143a0f6df0d3e8d9f627094c4f9552fa724168bad28c1db6eacf475a0792e406b5a9bfc779ecab3401aeafc877a342483b157576a3b3bbfc0d1024d743a042f083d7e00556a1815e040265ceb729477f63549ae33c1cd4168077e292a5ebe549aa812883db4150cbb71af2c568d0497268f8d34c38515c5b8220e49f282c1f60c6eabe2ff16a8c9a850b4554d2184a2138e83aa2ea2d7bb7112d68038ad2cac6a3a3702afcdc71bb42e1dd42b88c5fe272ddbefe9fa2d6f1387e1b8018e2168e23b", 0xd4}], 0x6) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000100)=@gcm_256={{0x304}, "696335283bf79057", "5615c6250f36550293b1f5bd2e006a7a1b6ea19e0000000000000800", "0100", "ffffffffe000"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc"}, 0x38) ioctl$FITHAW(r0, 0xc0045878) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x100}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r2, &(0x7f0000000380)=""/46, 0xfffffeb4) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000200)={0x10c, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0xf9, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0xc, 0x3, 0x0, 0x0, @u64=0xf}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x10c}], 0x1}, 0x10) 87.333871ms ago: executing program 0 (id=7527): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079101c0000000000610408000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="cb", 0x1}], 0x1, &(0x7f0000000500)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x9}}, @sndrcv={0x30, 0x84, 0x1, {0x50, 0x5, 0x200, 0x7, 0x0, 0x7, 0x3, 0x7}}], 0x48, 0x40}, 0x4040040) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x7) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r11) sendmsg$IPVS_CMD_NEW_SERVICE(r11, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe8000000000000000000000000000bb060001000a00000008000600777272000c0007002e00000005000000080009002700feff060002001100000008000b0073697000080008000900000006000400"], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) r13 = socket(0x1, 0x803, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000340)={"908363d22079de6abe8f859279687f02", 0x0, 0x0, {0x9, 0x5}, {0x0, 0x9}, 0x3, [0x8001, 0x7, 0x5, 0x9, 0x2, 0x5, 0x6, 0x100000001, 0x100, 0x616e, 0x7, 0xffffffffffffffff, 0x3, 0x3, 0x8d, 0x1]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001480)={{r1}, r14, 0x10, @inherit={0x90, &(0x7f0000000440)={0x0, 0x9, 0x37fffffffc, 0xb, {0x30, 0x3, 0x6, 0x5, 0x5}, [0x400, 0x7, 0x401, 0x3, 0x5, 0x63c, 0x8000, 0x9, 0x80000000]}}, @name="9a2e7e5ce530cd933956f8f6e3cc943353c96613938aff1324f099ea8b4cb16f882f8709e77cc66b07f7ee4263ba3d7a75941006b9415348fc0e1a231e41ee0dc74abb517800ad7ea22df4054bd58fae570fcf733da1d7d4008564ccd66c339c74e7b5122a78c65cc3ecb585d509bc6eec4beb067875d604563363139ce8237eb58ae4dad58ba977b804131ab97566175b0c989536e0884523e953a32a34f9122531bb441822859618cc36cf07bf1ef6d6f8ccf6f186e29f58ff4ba37d94c72f6193fd87c4df4657920a54596630e77420f3cc97e402a39a46abe6b83fcb9d1cec8e5098f5a76466a38098cb1af1d3eb4e20111aa11b2d6e6293c53353588bf61282bce43186c418edad4eb279f01e9fe19f33bc25411ddd3eb99544485d42953bde0e4335c41d2c5d2849c6815089800e2016ef9fb2450eecedbaf0632e84f02b01e2bb2faaeaff7e0baa4bc756d91c71c5d8cdc6c3dae3e83d883bf90d974c7e9930c6bfd84001234aaa3371fabe53a8add646968d4be7d5a15774155a9b35d76c4e35a3e0133a3f232cadc554d89c32819c29b019f6531ced4367c29a04281dfc07bd949fd1eb58ac83d2213c102e814e432bbb8ed3ce78e3333f224a35e36c85b265c10cdad6085ec8813c7958d502bb132b392f9ed590230b87922f6488aac8c80bab2a28c4a30c9b8b195b82628a32bf8184d2e4298d05552ae152ad5a8fc2b247096c33369d2cb14b4d77fc8aa3045fe5fe4fb14c5d45a8e6fb5a113157b216502ea8bca1a6c2f99719c05412710239b3dec9d47e18eda15a45a1a011467e910a25d5aebf79d549c48831aeb8e9d6a3bc96c2655f70459fe75976b9744af022bdfd93561339e0346c088e41ea16e5adc351beeb65f1bd34367f2269478330b6bec25df953dec4e4bb2e52d411cae8730776f72810485a474befb362a0e7eed2142a5e97998011f28f3c52485c38ec70445f6b73d171bd79593e54d8841637616ea482eb96bb2e690948dfb9222f578c2adb9710310a6b71646a60f80e60e796e8b6e3a756daa43ec4fcf847c095425effeb336f4cadf6afc5c0136ea7944576d8a40969fdf5c4d55ceaff4884525cb8a3ceec0b8c35e8cf2edf15a65d1da18b23c545a74357b29f0e16e3ce3124244afa52d142034d8c7a3963b6dd40a1c29b2f5a433078feb0b9bc4c188cef3158993325524310533e089c1d1427c13ba5bad5425bda530cbff718d777159b137ead47ff1b7195cdcf257dc94a247cc82528e2886feb488d3b84b58708a37767991f5670086be64099b548eab342ff12ada3a2b160f6a71bf3a50fa1c8d0d366c0bb98d7054180d6094cec9cd39fc6f568b32f1ca06c971b1bf0ea54fca78132ec7df7fbef6ac13813a27e63e415908f7d8d2f0befd15055371937b943fc2b90fc114602ad36c4441d0c015e012164bc9c00f29ebc1fc8f931c8d001d042eff6d770326777d8e1e12903f8a61fe3b40904c279b0a9c313eafd6a0ca738eba91930ccc553631b37676239313d7b6b79faec2ff5257b95e50fe8179395e519677260441f023f6dbe7e53db9b0ff9721bb1e49fa39f5989e13c048a5514199fcbc59a8ab924f4a83898b4a5f272e9a96d4d2acedbefbcbc1857c7663e3d1d5d967f02d907ac5ded03362f96c956271aeaf6f8a3452b1ec7e4bb8a5d3e79996c2bd6b669396517c067ecbadaff855b3d1bc3897db92c2e197b610b75557bddbeb5aba22c05ee08055e554f52700dbd442ab1e9aa4054f54248851dced0d038f6e0780284032633ff1aaa9c8208ea1be4e41962113ba59a46b6d536ac4853a75d5a512de15f5e128e9085728b0725da545827574515b4520e940f4a334cd75f41120c962f9d11c0dacd7f5c62d46c9f464b90af1983a8fabaf5dca627362a853b00bb58ec1a2995c743dcbeadd8a7038dadade938e8296b3d638253b0c59a577dc5786a886e8fabe5beca0c32696bba77bc6c51bd4ffecb38ffeb38c3bcd5411acd91972421ad32bf09a4d100caf51a5efe581a32334adcd5ecb3efece2e2e2174c42902bc9986f2f1b23c4277a52a15aa7d1918cac953f6acd26e3d3b2779af6519970d07dd49ec4e64a86883fa0a05987dbd485b474d9519399d905d979b135abc4d13f1b48c0db83e23a65b9841238098d1ba536641dda1a0d50ab24d1bbef4aa4d4fbe940e61a1dbf2223491cf36e53c2045dfeffcba9a9ac765ddf04cc5c8644a44f41041f1346a7b1c89731edf0d08f99c53a8de3112f0498931c1768cad648a1f61c30debefe13e8a886384ce9f89dbb4b8ad7495dc075a58fafa8e9f384851e1b9f5f014c1e8d864b56e57e0c87c93ae4381752becfbc3418daa2566391ed391710b319039f62246a013841bb14bac08d4a9c4317cef2bc6596af0e82d05e9d393473b89a53408f8afbdc55fec930e233cb2221506b1fad193b93f16c20425c4ab1a03d770381ccd6469b2007447b674cc03991b61badb1c5c65cfd36d98ab4dc311162dc88c230a35b01939b2ca467176a3910a4970e3f78df52f03e0ebff6550a4e2584c7d5e74f307f0ed6b3d3228e28185a617c2934779f26daa81af5ef0a4b060529fef9fee66b9d48f70d6feee5a43647689964768299cf27cd69d3149dec6e8cfdbccc87a07e38fb4de4395add9bb677959335c031fc2d96a63b267e1ba99d65d9e23300adb48afc411adbca33d0f26e955c69c0d223b62691191df9d8f5f9f1203d2b1f098479e8a1f44007bcbf0a6e0fe046895b94867442766da6dbb7df6387f48d9f940c993dbc2fb99785629fb01b1ca7f05425525a1a7633b950c37607e01b77521784f60aaed971ffac497cd83c633b4589ac88b6ee99dca089f9f2f89b5bedae7bbae1bbfb8ff3bce8270de64e9077ae12853e18dfddbccf31afda682bc85b35bacb80ad9810a04ca2ea49b8f2abaaa899c7ca76607024a4a062c7dc40ac02b174173f806284ee7ba37e255898c3d8fed7601cd2f3bbdfae092e6412cb4ad3c92f06ab07305b84784b020a49a60a0c77ab71392746f2b935441e82d19555b5590a4def9be96940837c1b75460e855990dfb181e68385bf2b0c37ef06b53d0d31570410a6f720b3e33465d80a2124d6bf3b20ed44bfea953723ed9ec96d23c8ef1094e1706ce032b831b2003d24fc991c4f3df68dc1414dd537e564eccfa8a2f24739a45fe1e4b118f1671635d79d4f8f2cb9db5a9b9c128810606380789f88a546c1ee43cba95a6aea253d0ac78d1752452bc8638b5a2c2cf15cdfa73a8f2002a9efda3de110bff09b53d12bd44b7575704dbdedcdda6cebfd4327c1bc747781ef35e8d2bbdbd87165d9f47df7ee5dc777d1157559ec38cbacb4e001e05af37b5ad8f3b7ff9723f619433e09a9d9894ca881f7ea16f051da8299278e107bf25ca72b8010db1a14475e5c78e44dbe8a2df8302898b6df584acf83209e4507833ffb7cfa78f4f374a4cf427f579f19b48fca262cde0fca3550cfa2f1d6c6edab773d731c3a28f94572d3d965345ca3e4f9eb3d2b87ab925e4d62ce17da2057fc47d0d93937a79c0c80a52a53fa4838687516fd603578ffde8a0dea59367303bc5814a6a27d4edca3cf481bce7360bf29e33acd3530ba38503521ca89c4ff542dac5fdf68859345f2b28f900dfac4e17f7528fc49f5b415c910b4115bb1464c9e8dfa67586bc73fda1834791b6424f7b9002e77ebd66c977c616b57d28fd8e49dd882588c10044ca820f2b99b2f925809060098f1d395bb6754a5f4ac6ad1050e4318292e8ffab63cf4c5cb511939ba248c2372a2e080ffbfb5aa2538b8905070fe4537b18a1ca55afcc9f4dbb8621d065ba0174fee33d3a27ed233554aa173e2e396762e5c3994438053d9eb97e1d26457e8779b632de22f899056aafa8912fcee47dad915f1ec16db69d715265f79e7dcf851bfbdbd66c818b895300838556abf7a27a458562be212efe6f47a5a49c2f87901eb6267e414c6bde7e43c9629ae39781c3da210edf181e82207adc099707ce9556c29c6e01a2a97f47ddca367d4c7aecc5c2bd9652dba77ca47324f95dbca46d5c1f407dac8ea7898fa9404ac9d00c11cbbb67fc6016686a862991df037e2034bbc186b3179997cd161d6beb25bb3f6dbd5d3e455ac03a8771f80b6477a7f91d516fc6966a13938ed8d0d8db13c13c10b455dbc5871248f9ea230a7ed18e7cf5aac0a76547007b0aaf6bc135599603394cf4e8557c9bbc2113dff232bc08b658d60454d8b6fc5197a68fb13d32f0c826987767e42298de5093af8b91340f41e6f728ff44a36e65f89765b2ee3b9e258f2cab3b0320b975b38ecd021ece535e6a605b4238b7cb2b5e1bdbb6806c0006b963c145bad56e7a0221b41df7b229977a3a4e9346f3a5350fffc2704bde04155238d13c6d261c054eaeec5150bdceac40f01d42ab7ef3ba5d000ba360ceef071e8520fd1aba91005470b5a532d90d8cdf74d75efd0fb23300f6c61ee4a9d96c16bd04f5d5ee3092a89cc26b83e2783b03fd089e8ad656015042965cc54d474e7ea41dd3b437fd6b35352b20546b16a8bade2b1f438b9dc7c612e7b1545c69a405b6bb1571f7562c14cd989141d5c99f92467640aedac6fb06e7c0f04326fd8b4941c5bfc898034916b94a2b63760527f244a07763df7d3b21ec2ca482911852cd0fa8e344f46ffda3a42d879343e59faa8e0fe8652b0decbb0828e4304cf7bac15033f48660bcf8ba0799e8ecd5da97707fa69f68a36e73d4b1da453dc696a7450b895d64b4aa42b66265ca0eb99d89315e14a7a8eeb1a5585f3261b80cb5712696857000ccadf229a4b5b04f80468f15c4abaf4e57167f8ea83a283016608f50b995d62e051e34638bc2dfa5fc687ec2e95973078897afda8666f8d8c05d6500c6aaaef1668dd2a5c3778fba81f1b4aa8de48b7042ef86faee8565ea347738746646178f69f4084dffb4b6c4c27cae5fd73d7e2d1b9f2342322983b70d15275cef74bbab6f055e6cfef32567fb201adca9086c29ec3b8221e792153f34a225ec5820760e7628671544e69b86011e1dfd9db71e3a556f6a9d1f7562e129572edcaf66655500e73ef08b0a6ba038f35090d5a50cbb82c254af49c8c72bdd9df13fe7d78ac1f171bf07843d7b793d188dae6e0addf0c31a92da1c1543f59cef2cb5dc8917d852646524155151200b6b2fd181d8ce37cbe7fc0df55b361c5f86ffe2e70a6674acd1289132b631da69bddab99f5cecd9d34a2e3435fc0eadaa01caa79415b699239dd65ec6d7c7b6a77cae652e19562de520dad2b176d84ea9890049db8b0f46115343f7a083b83ef7c146bd4bc5331741ad04ff040e9950ae3e935b54cd135c5dbe47b0149dbd763f481924658e0f91f17055a0f35bc872bf499ebeea8ccca4174770c74d17e68055ed5cf4077764019c3dfe8a0d063ae7efa523c4a8a329158071843835a0c738bac8e97552f015402c0bfe16c18b4d929dc43c9256856da4becbd90df9753c3d20f59045d06f4b6a3f3c939b2438b01c919fd58d47515fc250c0ce4707a3b897eb3c99aac5b4fe42e64f1f6d5d09919e27c62c7005765f3ef4c4a203a7de480bf6f7077f99766319d320b5da7b77e3f87110f2e642ecb1918426009099fffac83b334318cc4bce955ac8e63591288fc47c189334faae1a12cbe74a8f9861c6688"}) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet_tcp_int(r7, 0x6, 0x4, &(0x7f00000001c0)=0x251, 0x4) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44800) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2b, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 0s ago: executing program 3 (id=7528): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8011) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001780)=[{0x0}], 0x1}, 0x4000080) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000040)={'dummy0\x00', @ifru_mtu=0x1}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r6, {0x4, 0x2}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x20040054) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) unshare(0x10800) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x7000000}, @TCA_FQ_FLOW_REFILL_DELAY={0x1027, 0x9, 0x3}]}}]}, 0xa2}}, 0x0) kernel console output (not intermixed with test programs): nd0 [ 727.384909][T23143] 8021q: adding VLAN 0 to HW filter on device ` [ 727.401959][T23143] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 727.635309][T23157] __nla_validate_parse: 7 callbacks suppressed [ 727.635329][T23157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6453'. [ 728.222638][T23161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6454'. [ 728.375476][T23155] ip6_vti0 speed is unknown, defaulting to 1000 [ 729.003060][T23155] wlan0 speed is unknown, defaulting to 1000 [ 729.889220][T23182] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6459'. [ 730.679328][T23185] netlink: 'syz.3.6460': attribute type 1 has an invalid length. [ 730.776088][T23185] bond12: entered promiscuous mode [ 730.856773][T23191] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 730.864148][T23191] IPv6: NLM_F_CREATE should be set when creating new route [ 730.871458][T23191] IPv6: NLM_F_CREATE should be set when creating new route [ 730.881959][T23185] 8021q: adding VLAN 0 to HW filter on device bond12 [ 730.930336][T23191] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 731.077691][T23189] 8021q: adding VLAN 0 to HW filter on device bond12 [ 731.116555][T23189] bond12: (slave wireguard0): The slave device specified does not support setting the MAC address [ 731.127688][T23189] bond12: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 731.151701][T23197] netlink: 'syz.4.6462': attribute type 1 has an invalid length. [ 731.159710][T23189] bond12: (slave wireguard0): making interface the new active one [ 731.179728][T23189] wireguard0: entered promiscuous mode [ 731.191955][T23189] bond12: (slave wireguard0): Enslaving as an active interface with an up link [ 731.229735][T23191] bond12: (slave wireguard1): The slave device specified does not support setting the MAC address [ 731.247968][T23191] bond12: (slave wireguard1): Enslaving as a backup interface with an up link [ 731.354056][T23197] 8021q: adding VLAN 0 to HW filter on device bond13 [ 731.499760][T23205] syzkaller0: entered promiscuous mode [ 731.518175][T23205] syzkaller0: entered allmulticast mode [ 731.526733][T23206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6463'. [ 731.591160][T23208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6465'. [ 731.787783][T23212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6466'. [ 731.811654][T23212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6466'. [ 733.166789][T23217] lo: entered promiscuous mode [ 733.195712][T23217] tunl0: entered promiscuous mode [ 733.216296][T23217] gre0: entered promiscuous mode [ 733.232081][T23217] gretap0: entered promiscuous mode [ 733.249395][T23217] erspan0: entered promiscuous mode [ 733.268299][T23217] ip_vti0: entered promiscuous mode [ 733.288587][T23217] ip6_vti0: entered promiscuous mode [ 733.298719][T23217] sit0: entered promiscuous mode [ 733.312107][T23217] ip6tnl0: entered promiscuous mode [ 733.319044][T23217] ip6gre0: entered promiscuous mode [ 733.339400][T23217] syz_tun: entered promiscuous mode [ 733.351648][T23217] ip6gretap0: entered promiscuous mode [ 733.369274][T23217] bond0: entered promiscuous mode [ 733.380789][T23217] dummy0: entered promiscuous mode [ 733.391593][T21039] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 733.402972][T23217] team0: entered promiscuous mode [ 733.419122][T23217] nlmon0: entered promiscuous mode [ 733.426622][T23217] 0ªX¹¦À: entered promiscuous mode [ 733.431990][T23217] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 733.507512][T23220] bond14: option arp_all_targets: invalid value (3) [ 733.524049][T23220] bond14 (unregistering): Released all slaves [ 733.550408][T23206] ip6_vti0 speed is unknown, defaulting to 1000 [ 733.751205][T23229] tipc: Enabling of bearer rejected, already enabled [ 733.958685][T23206] wlan0 speed is unknown, defaulting to 1000 [ 734.032942][T23215] ip6_vti0 speed is unknown, defaulting to 1000 [ 734.142830][T21039] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 734.469415][T23215] wlan0 speed is unknown, defaulting to 1000 [ 734.848466][T23244] netlink: 'syz.1.6476': attribute type 10 has an invalid length. [ 735.293355][T23255] sch_tbf: burst 5 is lower than device syzkaller0 mtu (313) ! [ 736.287732][T23278] tipc: Enabling of bearer rejected, already enabled [ 736.658678][T23290] netlink: 'syz.0.6485': attribute type 11 has an invalid length. [ 736.989049][T23299] vlan5: entered promiscuous mode [ 737.011839][T23299] batadv0: entered promiscuous mode [ 737.351705][T23311] syzkaller0: entered promiscuous mode [ 737.362775][T23311] syzkaller0: entered allmulticast mode [ 737.823370][T23320] vlan0: left promiscuous mode [ 737.847449][ T1002] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 737.862376][ T1002] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 737.899000][ T1002] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 737.907820][ T1002] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 738.004758][T23324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6499'. [ 738.052209][T23324] netlink: 'syz.1.6499': attribute type 1 has an invalid length. [ 739.146002][T23351] pim6reg1: entered promiscuous mode [ 739.181989][T23351] pim6reg1: entered allmulticast mode [ 739.412980][T23357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6504'. [ 739.900948][T23360] syzkaller0: entered promiscuous mode [ 739.921446][T23360] syzkaller0: entered allmulticast mode [ 740.197221][T23368] netlink: 584 bytes leftover after parsing attributes in process `syz.3.6508'. [ 741.133420][T23347] ip6_vti0 speed is unknown, defaulting to 1000 [ 742.018237][T23380] macvtap2: entered allmulticast mode [ 742.025922][T23380] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 742.057088][T23380] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 742.206791][T23347] wlan0 speed is unknown, defaulting to 1000 [ 742.268633][T23372] ip6_vti0 speed is unknown, defaulting to 1000 [ 742.412335][T23387] syzkaller0: entered promiscuous mode [ 742.422376][T23387] syzkaller0: entered allmulticast mode [ 743.015363][T23372] wlan0 speed is unknown, defaulting to 1000 [ 743.063776][T23373] ip6_vti0 speed is unknown, defaulting to 1000 [ 743.876525][T23375] ip6_vti0 speed is unknown, defaulting to 1000 [ 744.280307][T23375] wlan0 speed is unknown, defaulting to 1000 [ 744.399291][T23373] wlan0 speed is unknown, defaulting to 1000 [ 745.137200][T23395] ip6_vti0 speed is unknown, defaulting to 1000 [ 745.409175][T23403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6517'. [ 745.532717][T23395] wlan0 speed is unknown, defaulting to 1000 [ 745.539781][T23393] ip6_vti0 speed is unknown, defaulting to 1000 [ 746.287946][T23413] netlink: 'syz.4.6520': attribute type 2 has an invalid length. [ 746.343389][T23393] wlan0 speed is unknown, defaulting to 1000 [ 747.189945][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.196884][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.128965][T23421] netlink: 'syz.1.6522': attribute type 4 has an invalid length. [ 748.242375][T23423] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 748.410896][T23432] lo: entered promiscuous mode [ 748.433081][T23432] tunl0: entered promiscuous mode [ 748.443326][T23432] gre0: entered promiscuous mode [ 748.473158][T23432] gretap0: entered promiscuous mode [ 748.490360][T23432] erspan0: entered promiscuous mode [ 748.498068][T23432] ip_vti0: entered promiscuous mode [ 748.544547][T23432] ip6_vti0: entered promiscuous mode [ 748.575550][T23432] sit0: entered promiscuous mode [ 748.608269][T23432] ip6tnl0: entered promiscuous mode [ 748.634423][T23432] ip6gre0: entered promiscuous mode [ 748.653290][T23432] ip6gretap0: entered promiscuous mode [ 748.676376][T23432] bridge0: entered promiscuous mode [ 748.683860][T23432] bond0: entered promiscuous mode [ 748.689070][T23432] bond_slave_0: entered promiscuous mode [ 748.698452][T23432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.708221][T23432] team0: entered promiscuous mode [ 748.714244][T23432] team_slave_0: entered promiscuous mode [ 748.720783][T23432] team_slave_1: entered promiscuous mode [ 748.732566][T23432] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.743978][T23432] dummy0: entered promiscuous mode [ 748.752308][T23432] nlmon0: entered promiscuous mode [ 748.759797][T23432] caif0: entered promiscuous mode [ 748.766651][T23432] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 748.784280][T23413] ip6_vti0 speed is unknown, defaulting to 1000 [ 748.866829][T23435] bond11: option arp_all_targets: invalid value (3) [ 748.876671][T23435] bond11 (unregistering): Released all slaves [ 748.970708][T23445] syzkaller0: entered promiscuous mode [ 748.976883][T23445] syzkaller0: entered allmulticast mode [ 749.368294][T23413] wlan0 speed is unknown, defaulting to 1000 [ 750.802419][T23463] ip6_vti0 speed is unknown, defaulting to 1000 [ 751.177800][T23488] pimreg3: entered allmulticast mode [ 751.220644][T23467] ip6_vti0 speed is unknown, defaulting to 1000 [ 751.226904][T23463] wlan0 speed is unknown, defaulting to 1000 [ 751.509913][T23493] netlink: 'syz.0.6541': attribute type 4 has an invalid length. [ 751.773260][T23467] wlan0 speed is unknown, defaulting to 1000 [ 751.905197][T23499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6544'. [ 752.002500][T23500] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6543'. [ 752.013119][T23500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6543'. [ 752.804266][T23512] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 752.812818][T23512] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 753.200390][T23518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6550'. [ 753.519309][T23530] netlink: 584 bytes leftover after parsing attributes in process `syz.4.6551'. [ 753.641108][T23533] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6552'. [ 754.070421][T23533] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6552'. [ 754.328749][T23539] v: renamed from vlan0 [ 754.360429][T23499] ip6_vti0 speed is unknown, defaulting to 1000 [ 754.825564][T23499] wlan0 speed is unknown, defaulting to 1000 [ 754.929093][T23554] tipc: Enabled bearer , priority 0 [ 754.996302][T23554] syzkaller0: entered promiscuous mode [ 755.005794][T23554] syzkaller0: entered allmulticast mode [ 755.013059][T23515] ip6_vti0 speed is unknown, defaulting to 1000 [ 755.027929][T23554] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 755.078722][T23554] tipc: Resetting bearer [ 755.098771][T23553] tipc: Resetting bearer [ 755.144323][T23553] tipc: Disabling bearer [ 755.539872][T23517] ip6_vti0 speed is unknown, defaulting to 1000 [ 755.539887][T23515] wlan0 speed is unknown, defaulting to 1000 [ 755.727160][T23517] wlan0 speed is unknown, defaulting to 1000 [ 755.734545][T23549] siw: device registration error -23 [ 756.058628][T23564] syzkaller0: left promiscuous mode [ 756.065944][T23564] syzkaller0: left allmulticast mode [ 756.442032][T23546] ip6_vti0 speed is unknown, defaulting to 1000 [ 756.673299][T23546] wlan0 speed is unknown, defaulting to 1000 [ 756.673308][T23558] ip6_vti0 speed is unknown, defaulting to 1000 [ 756.874803][T23558] wlan0 speed is unknown, defaulting to 1000 [ 759.000114][T23589] tipc: Enabled bearer , priority 0 [ 759.383118][T23592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6566'. [ 759.554867][T23597] netlink: 332 bytes leftover after parsing attributes in process `syz.1.6567'. [ 759.826682][T23597] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 760.712452][T23617] lo: entered promiscuous mode [ 760.719969][T23617] tunl0: entered promiscuous mode [ 760.726431][T23617] gre0: entered promiscuous mode [ 760.732797][T23617] gretap0: entered promiscuous mode [ 760.739635][T23617] erspan0: entered promiscuous mode [ 760.746470][T23617] ip_vti0: entered promiscuous mode [ 760.754855][T23617] ip6_vti0: entered promiscuous mode [ 760.761002][T23617] sit0: entered promiscuous mode [ 760.768151][T23617] ip6tnl0: entered promiscuous mode [ 760.777718][T23617] ip6gre0: entered promiscuous mode [ 760.784236][T23617] vcan0: entered promiscuous mode [ 760.791172][T23617] bond0: entered promiscuous mode [ 760.799951][T23617] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 760.959397][T23621] bond13: option arp_all_targets: invalid value (3) [ 761.098615][T23621] bond13 (unregistering): Released all slaves [ 761.456135][T23629] netlink: 'syz.2.6574': attribute type 1 has an invalid length. [ 761.522892][T23580] ip6_vti0 speed is unknown, defaulting to 1000 [ 762.119060][T23580] wlan0 speed is unknown, defaulting to 1000 [ 762.119069][T23578] ip6_vti0 speed is unknown, defaulting to 1000 [ 763.246878][T23578] wlan0 speed is unknown, defaulting to 1000 [ 763.247430][T23634] ip6_vti0 speed is unknown, defaulting to 1000 [ 763.864837][T23627] ip6_vti0 speed is unknown, defaulting to 1000 [ 764.009755][T23627] wlan0 speed is unknown, defaulting to 1000 [ 764.026027][T23619] ip6_vti0 speed is unknown, defaulting to 1000 [ 764.045300][T23634] wlan0 speed is unknown, defaulting to 1000 [ 764.724214][T23619] wlan0 speed is unknown, defaulting to 1000 [ 765.115058][T23644] lo: left promiscuous mode [ 765.132439][T23644] tunl0: left promiscuous mode [ 765.147098][T23644] gre0: left promiscuous mode [ 765.169019][T23644] gretap0: left promiscuous mode [ 765.178765][T23644] erspan0: left promiscuous mode [ 765.197303][T23644] ip_vti0: left promiscuous mode [ 765.212955][T23644] ip6_vti0: left promiscuous mode [ 765.228325][T23644] sit0: left promiscuous mode [ 765.281891][T23644] ip6tnl0: left promiscuous mode [ 765.389049][T23644] ip6gre0: left promiscuous mode [ 765.424819][T23644] syz_tun: left promiscuous mode [ 765.459912][T23644] ip6gretap0: left promiscuous mode [ 765.489900][T23644] bond0: left promiscuous mode [ 765.518518][T23644] team0: left promiscuous mode [ 765.541993][T23644] dummy0: left promiscuous mode [ 765.564199][T23644] nlmon0: left promiscuous mode [ 765.586375][T23644] 0ªX¹¦À: left promiscuous mode [ 765.600129][T23644] batadv0: left promiscuous mode [ 765.606624][T23644] batadv0: left allmulticast mode [ 765.620301][T23644] ip6gre1: left promiscuous mode [ 765.627246][T23644] geneve4: left promiscuous mode [ 765.633304][T23644] bond5: left promiscuous mode [ 765.638266][T23644] bond6: left promiscuous mode [ 765.646674][T23644] bond8: left allmulticast mode [ 765.662339][T23644] bond10: left promiscuous mode [ 765.667255][T23644] bridge5: left promiscuous mode [ 765.672506][T23644] bond10: left allmulticast mode [ 765.677469][T23644] bridge5: left allmulticast mode [ 765.700175][T23644] bond11: left promiscuous mode [ 765.711950][T23644] bond12: left promiscuous mode [ 765.716884][T23644] bridge6: left promiscuous mode [ 765.737903][T23644] bond12: left allmulticast mode [ 765.745638][T23644] bridge6: left allmulticast mode [ 765.798953][T23644] tipc: Resetting bearer [ 765.833392][T23644] syzkaller0: left promiscuous mode [ 765.838666][T23644] syzkaller0: left allmulticast mode [ 765.858548][T23644] macvtap1: left promiscuous mode [ 765.863966][T23644] macvtap1: left allmulticast mode [ 766.090710][T23647] syzkaller0: entered promiscuous mode [ 766.096383][T23647] syzkaller0: entered allmulticast mode [ 767.619350][T23660] lo: left promiscuous mode [ 767.645146][T23660] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 767.951082][T23683] dvmrp8: entered allmulticast mode [ 768.489074][T23690] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6591'. [ 768.502394][T23690] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6591'. [ 768.531215][T23690] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6591'. [ 768.553762][T23690] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6591'. [ 768.764026][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 768.783073][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 768.805238][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 768.828904][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 768.888014][T23682] dvmrp8: left allmulticast mode [ 769.260797][T23701] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6594'. [ 769.271007][T23701] openvswitch: netlink: Flow actions attr not present in new flow. [ 769.461388][T23683] ip6_vti0 speed is unknown, defaulting to 1000 [ 770.167370][T23692] ip6_vti0 speed is unknown, defaulting to 1000 [ 770.172050][T23683] wlan0 speed is unknown, defaulting to 1000 [ 770.546017][T23712] netlink: 'syz.4.6598': attribute type 1 has an invalid length. [ 770.795527][T23714] bond14: (slave ip6gretap3): Enslaving as a backup interface with an up link [ 770.823220][ T1116] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 770.838223][T23715] 8021q: adding VLAN 0 to HW filter on device bond14 [ 770.948043][T23712] veth19: entered promiscuous mode [ 770.957877][T23712] bond14: (slave veth19): Enslaving as a backup interface with a down link [ 770.981525][ T13] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 770.999285][T23698] ip6_vti0 speed is unknown, defaulting to 1000 [ 771.532608][T23692] wlan0 speed is unknown, defaulting to 1000 [ 771.568216][T23698] wlan0 speed is unknown, defaulting to 1000 [ 771.632939][T23727] netlink: 'syz.0.6602': attribute type 13 has an invalid length. [ 771.832355][T23727] tipc: Resetting bearer [ 771.966275][T23724] Set syz1 is full, maxelem 6117 reached [ 773.179609][T23756] netlink: 'syz.4.6609': attribute type 13 has an invalid length. [ 773.194948][T23756] netlink: 'syz.4.6609': attribute type 17 has an invalid length. [ 773.371486][T23761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 774.102619][T23772] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6612'. [ 774.304189][T23756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.314106][T23756] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.330388][T23756] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 774.770314][T23779] syzkaller0: entered promiscuous mode [ 774.796621][T23779] syzkaller0: entered allmulticast mode [ 774.998252][T23786] netlink: 'syz.1.6613': attribute type 11 has an invalid length. [ 775.007656][T23786] netlink: 'syz.1.6613': attribute type 11 has an invalid length. [ 775.015897][T23786] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6613'. [ 775.102252][ T79] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 775.253896][T23774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 775.635515][T23769] ip6_vti0 speed is unknown, defaulting to 1000 [ 776.455311][T23769] wlan0 speed is unknown, defaulting to 1000 [ 776.503354][T23757] ip6_vti0 speed is unknown, defaulting to 1000 [ 777.532499][T23781] ip6_vti0 speed is unknown, defaulting to 1000 [ 777.574967][T23757] wlan0 speed is unknown, defaulting to 1000 [ 778.353212][T23781] wlan0 speed is unknown, defaulting to 1000 [ 779.261557][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 779.343448][T23832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6628'. [ 779.401507][T23834] netlink: 240 bytes leftover after parsing attributes in process `syz.3.6627'. [ 779.579349][T23832] bridge11: port 1(veth21) entered blocking state [ 779.611981][T23832] bridge11: port 1(veth21) entered disabled state [ 779.618716][T23832] veth21: entered allmulticast mode [ 779.708155][T23832] veth21: entered promiscuous mode [ 779.718955][T23835] bridge11: port 2(veth0_to_bond) entered blocking state [ 779.820211][T23835] bridge11: port 2(veth0_to_bond) entered disabled state [ 779.838275][T23835] veth0_to_bond: entered allmulticast mode [ 779.868383][T23835] veth0_to_bond: entered promiscuous mode [ 779.903220][T23840] tipc: Enabling of bearer rejected, failed to enable media [ 780.017243][T23841] vlan0: entered allmulticast mode [ 780.023112][T23841] veth1: entered allmulticast mode [ 780.034319][T23841] bridge11: port 3(vlan0) entered blocking state [ 780.049968][T23841] bridge11: port 3(vlan0) entered disabled state [ 780.084426][T23841] vlan0: entered promiscuous mode [ 780.089739][T23841] veth1: entered promiscuous mode [ 780.613349][T23856] tipc: Resetting bearer [ 781.402505][ T1116] tipc: Resetting bearer [ 781.634864][T23875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6636'. [ 781.659549][T23875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6636'. [ 781.872966][T23875] veth0: entered promiscuous mode [ 781.990416][T23883] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6639'. [ 782.049841][T23883] nbd: socks must be embedded in a SOCK_ITEM attr [ 782.193964][T23891] bond0: (slave vlan0): Enslaving as an active interface with an up link [ 782.501934][T23895] IPv6: Can't replace route, no match found [ 782.882061][T23907] netlink: 'syz.1.6645': attribute type 10 has an invalid length. [ 782.897243][T23907] team0: left promiscuous mode [ 782.921545][T23907] team_slave_0: left promiscuous mode [ 782.927514][T23907] team_slave_1: left promiscuous mode [ 782.990729][T23907] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.039413][T23907] team0: entered promiscuous mode [ 783.047353][T23907] team_slave_0: entered promiscuous mode [ 783.077072][T23907] team_slave_1: entered promiscuous mode [ 783.085479][T23907] bond0: (slave team0): Enslaving as an active interface with an up link [ 783.455545][ T30] audit: type=1800 audit(1762400427.957:17): pid=23908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6644" name="cgroup.controllers" dev="tmpfs" ino=6906 res=0 errno=0 [ 783.914703][T23927] netlink: 'syz.3.6648': attribute type 11 has an invalid length. [ 783.961900][T23927] netlink: 'syz.3.6648': attribute type 11 has an invalid length. [ 783.969964][T23927] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6648'. [ 784.317041][T23932] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6650'. [ 784.382828][T23905] ip6_vti0 speed is unknown, defaulting to 1000 [ 784.422606][T23920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 784.558677][T23932] nbd: socks must be embedded in a SOCK_ITEM attr [ 785.093359][T23941] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6652'. [ 785.131983][T23905] wlan0 speed is unknown, defaulting to 1000 [ 785.138261][T23914] ip6_vti0 speed is unknown, defaulting to 1000 [ 785.236864][T23942] netlink: 'syz.3.6651': attribute type 11 has an invalid length. [ 785.276779][T23942] netlink: 'syz.3.6651': attribute type 11 has an invalid length. [ 785.339847][T23942] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6651'. [ 785.877501][T23937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 785.932950][T23914] wlan0 speed is unknown, defaulting to 1000 [ 786.809023][T23962] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6656'. [ 787.899381][T23974] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6659'. [ 787.931349][T23974] nbd: socks must be embedded in a SOCK_ITEM attr [ 788.141883][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 788.148663][T23981] bond13: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 788.177987][T23981] bond13 (unregistering): Released all slaves [ 788.698160][T23999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6666'. [ 788.912784][T24000] xt_CT: No such helper "netbios-ns" [ 790.197607][T24019] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 790.376206][T24041] tipc: Resetting bearer [ 790.602891][T23997] ip6_vti0 speed is unknown, defaulting to 1000 [ 790.995986][T24047] netlink: 'syz.0.6674': attribute type 1 has an invalid length. [ 791.201059][T23997] wlan0 speed is unknown, defaulting to 1000 [ 791.204774][T24030] ip6_vti0 speed is unknown, defaulting to 1000 [ 791.416118][T24052] batadv0: left promiscuous mode [ 791.439977][T24052] batadv0: left allmulticast mode [ 791.489438][T24052] gretap1: left allmulticast mode [ 791.497686][T24052] bond7: left promiscuous mode [ 791.509912][T24052] ip6gretap1: left promiscuous mode [ 791.517625][T24052] bond7: left allmulticast mode [ 791.522845][T24052] ip6gretap1: left allmulticast mode [ 791.530704][T24052] macvtap1: left promiscuous mode [ 791.536503][T24052] macvtap1: left allmulticast mode [ 791.545546][T24052] bond10: left promiscuous mode [ 791.550559][T24052] bond10: left allmulticast mode [ 791.557250][T24052] bridge10: left allmulticast mode [ 791.563309][T24052] bridge12: left allmulticast mode [ 791.569812][T24052] tipc: Resetting bearer [ 791.577375][T24052] syzkaller0: left promiscuous mode [ 791.591439][T24052] syzkaller0: left allmulticast mode [ 791.608383][T24052] gretap2: left promiscuous mode [ 791.614656][T24052] gretap2: left allmulticast mode [ 791.621681][T24052] bond12: left promiscuous mode [ 791.626664][T24052] wireguard0: left promiscuous mode [ 791.935960][T24030] wlan0 speed is unknown, defaulting to 1000 [ 792.207156][T24067] tipc: Enabling of bearer rejected, already enabled [ 792.505370][T24075] syzkaller1: entered promiscuous mode [ 792.510997][T24075] syzkaller1: entered allmulticast mode [ 793.147951][T24091] netlink: 6 bytes leftover after parsing attributes in process `syz.1.6683'. [ 793.199124][T24091] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 794.094476][T24110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6690'. [ 794.262620][T24110] netlink: 'syz.1.6690': attribute type 9 has an invalid length. [ 794.284491][T24110] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6690'. [ 794.314794][T24114] tipc: Enabling of bearer rejected, already enabled [ 794.416402][T24097] ip6_vti0 speed is unknown, defaulting to 1000 [ 794.995756][T24124] netlink: 'syz.4.6693': attribute type 1 has an invalid length. [ 795.304648][T24097] wlan0 speed is unknown, defaulting to 1000 [ 795.742282][T24105] ip6_vti0 speed is unknown, defaulting to 1000 [ 795.927100][T24135] netlink: 'syz.4.6696': attribute type 1 has an invalid length. [ 795.962842][T24135] 8021q: adding VLAN 0 to HW filter on device bond15 [ 796.382755][T24105] wlan0 speed is unknown, defaulting to 1000 [ 796.415762][T24117] ip6_vti0 speed is unknown, defaulting to 1000 [ 797.783265][T24160] tipc: Enabling of bearer rejected, already enabled [ 797.811502][T24160] syzkaller0: entered promiscuous mode [ 797.820796][T24160] syzkaller0: entered allmulticast mode [ 797.839225][T24160] tipc: Resetting bearer [ 797.977526][T24164] netlink: 'syz.3.6704': attribute type 39 has an invalid length. [ 797.991389][T24117] wlan0 speed is unknown, defaulting to 1000 [ 797.998764][T24146] ip6_vti0 speed is unknown, defaulting to 1000 [ 799.088536][T24146] wlan0 speed is unknown, defaulting to 1000 [ 800.082076][T24167] ip6_vti0 speed is unknown, defaulting to 1000 [ 800.402223][T24167] wlan0 speed is unknown, defaulting to 1000 [ 801.119372][T24221] netlink: 'syz.0.6708': attribute type 1 has an invalid length. [ 801.127391][T24176] ip6_vti0 speed is unknown, defaulting to 1000 [ 801.198060][T24221] 8021q: adding VLAN 0 to HW filter on device bond16 [ 801.283582][T24225] bond16: (slave geneve2): making interface the new active one [ 801.302914][T24225] bond16: (slave geneve2): Enslaving as an active interface with an up link [ 801.311998][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.330475][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.358947][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.379299][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.827900][T24228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.960730][T24176] wlan0 speed is unknown, defaulting to 1000 [ 802.881744][T24242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6715'. [ 802.914585][T24242] netlink: 'syz.1.6715': attribute type 1 has an invalid length. [ 803.263355][T24238] tipc: Resetting bearer [ 804.309329][T24232] ip6_vti0 speed is unknown, defaulting to 1000 [ 804.583542][T24270] lo: left promiscuous mode [ 804.589443][T24270] tunl0: left promiscuous mode [ 804.595812][T24270] gre0: left promiscuous mode [ 804.602078][T24270] gretap0: left promiscuous mode [ 804.613000][T24270] erspan0: left promiscuous mode [ 804.632372][T24270] ip_vti0: left promiscuous mode [ 804.639132][T24271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6722'. [ 804.644436][T24270] ip6_vti0: left promiscuous mode [ 804.684127][T24270] sit0: left promiscuous mode [ 804.741477][T24270] ip6tnl0: left promiscuous mode [ 804.761635][T24270] ip6gre0: left promiscuous mode [ 804.780624][T24270] ip6gretap0: left promiscuous mode [ 804.794240][T24270] bridge0: left promiscuous mode [ 804.799767][T24270] bond0: left promiscuous mode [ 804.809860][T24270] bond_slave_0: left promiscuous mode [ 804.816812][T24270] team0: left promiscuous mode [ 804.821831][T24270] team_slave_0: left promiscuous mode [ 804.827751][T24270] team_slave_1: left promiscuous mode [ 804.841684][T24270] dummy0: left promiscuous mode [ 804.855636][T24270] nlmon0: left promiscuous mode [ 804.863213][T24270] caif0: left promiscuous mode [ 804.874537][T24270] gtp0: left allmulticast mode [ 804.889067][T24270] ipvlan0: left allmulticast mode [ 804.894504][T24270] bond9: left allmulticast mode [ 804.899510][T24270] gretap2: left allmulticast mode [ 804.906695][T24270] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 804.914164][T24270] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 804.932492][T24270] veth0: left promiscuous mode [ 805.488377][T24288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6727'. [ 805.498524][T24288] netlink: 'syz.3.6727': attribute type 1 has an invalid length. [ 805.500239][T24289] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6726'. [ 805.518949][T24232] wlan0 speed is unknown, defaulting to 1000 [ 805.518971][ T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 805.551922][ T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 805.601398][ T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 805.612905][ T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 805.928432][T24299] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6730'. [ 806.001693][T24299] nbd: socks must be embedded in a SOCK_ITEM attr [ 806.233884][T24302] veth0_to_team: entered promiscuous mode [ 806.449994][T24310] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 806.498543][T24312] tipc: Failed to remove unknown binding: 66,1,1/469497681:3996604399/3996604401 [ 806.757751][T24317] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6734'. [ 806.776007][T24318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6735'. [ 806.929023][T24314] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6734'. [ 807.590513][T24323] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6736'. [ 807.712237][T24327] netlink: 'syz.3.6738': attribute type 1 has an invalid length. [ 807.970450][T24335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6740'. [ 808.188506][T24342] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 808.629007][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.758091][T24346] netlink: 'syz.0.6742': attribute type 13 has an invalid length. [ 808.773297][T24307] ip6_vti0 speed is unknown, defaulting to 1000 [ 808.788640][T24346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6742'. [ 809.034836][T24354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6744'. [ 809.070139][T24354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6744'. [ 809.104020][T24354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6744'. [ 809.133562][T24354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6744'. [ 809.160316][T24354] erspan0: entered promiscuous mode [ 809.172964][T24354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6744'. [ 809.202812][T24354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6744'. [ 809.220425][T24354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6744'. [ 809.237667][T24354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6744'. [ 809.266663][T24354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.279978][T24354] 8021q: adding VLAN 0 to HW filter on device ` [ 809.306886][T24354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 809.490213][T24308] ip6_vti0 speed is unknown, defaulting to 1000 [ 809.498022][T24307] wlan0 speed is unknown, defaulting to 1000 [ 810.487695][T24308] wlan0 speed is unknown, defaulting to 1000 [ 810.510033][T24322] ip6_vti0 speed is unknown, defaulting to 1000 [ 811.135815][T24332] ip6_vti0 speed is unknown, defaulting to 1000 [ 811.280285][T24356] ip6_vti0 speed is unknown, defaulting to 1000 [ 811.420330][T24337] ip6_vti0 speed is unknown, defaulting to 1000 [ 811.602998][T24356] wlan0 speed is unknown, defaulting to 1000 [ 811.649763][T24337] wlan0 speed is unknown, defaulting to 1000 [ 811.723731][T24322] wlan0 speed is unknown, defaulting to 1000 [ 811.870118][T24332] wlan0 speed is unknown, defaulting to 1000 [ 812.902170][T24371] netlink: 'syz.1.6749': attribute type 1 has an invalid length. [ 813.157326][T24373] nbd: socks must be embedded in a SOCK_ITEM attr [ 813.710408][T24383] __nla_validate_parse: 10 callbacks suppressed [ 813.710430][T24383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6751'. [ 813.887742][T24383] vlan1: entered promiscuous mode [ 813.893386][T24383] bond0: entered promiscuous mode [ 813.898533][T24383] bond_slave_0: entered promiscuous mode [ 813.911597][T24383] team0: entered promiscuous mode [ 813.927128][T24383] team_slave_0: entered promiscuous mode [ 813.933243][T24383] team_slave_1: entered promiscuous mode [ 815.060650][T24402] netlink: 'syz.1.6753': attribute type 11 has an invalid length. [ 815.075718][T24402] netlink: 'syz.1.6753': attribute type 11 has an invalid length. [ 815.673455][T24402] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6753'. [ 815.931613][T24387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 816.451119][T24417] wg1: entered promiscuous mode [ 816.457962][T24417] wg1: entered allmulticast mode [ 816.696437][T24419] netlink: 'syz.3.6760': attribute type 1 has an invalid length. [ 816.819945][T24389] ip6_vti0 speed is unknown, defaulting to 1000 [ 817.277847][T24427] 0: reclassify loop, rule prio 0, protocol 800 [ 817.312823][T24431] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6764'. [ 817.623337][T24434] syzkaller0: entered promiscuous mode [ 817.628945][T24434] syzkaller0: entered allmulticast mode [ 817.637217][T24389] wlan0 speed is unknown, defaulting to 1000 [ 817.637903][T24390] ip6_vti0 speed is unknown, defaulting to 1000 [ 819.635469][T24390] wlan0 speed is unknown, defaulting to 1000 [ 819.635983][T24410] ip6_vti0 speed is unknown, defaulting to 1000 [ 820.085470][T24442] syzkaller0: entered promiscuous mode [ 820.142355][T24442] syzkaller0: entered allmulticast mode [ 820.150359][ T30] audit: type=1800 audit(1762400464.647:18): pid=24439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6766" name="memory.events" dev="tmpfs" ino=7063 res=0 errno=0 [ 820.178192][T24410] wlan0 speed is unknown, defaulting to 1000 [ 820.286181][T24429] ip6_vti0 speed is unknown, defaulting to 1000 [ 820.569488][T24449] tipc: Enabling of bearer rejected, already enabled [ 820.844336][T24451] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 820.889030][T24451] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 821.002936][T24451] netlink: 'syz.3.6771': attribute type 10 has an invalid length. [ 821.011022][T24451] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 821.018451][T24451] bond0: (slave wlan1): refused to change device type [ 821.153923][T24429] wlan0 speed is unknown, defaulting to 1000 [ 821.691523][ T1116] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 821.933481][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 821.944003][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 821.952802][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 821.961367][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 821.969574][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 822.028628][ T1116] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.037607][ T1116] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.272899][ T1116] netdevsim netdevsim2 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.165893][ T1002] bond0 (unregistering): Released all slaves [ 823.180454][ T1002] bond1 (unregistering): Released all slaves [ 823.302427][ T1002] bond2 (unregistering): Released all slaves [ 823.414772][ T1002] bond3 (unregistering): Released all slaves [ 823.528428][ T1002] bond4 (unregistering): Released all slaves [ 823.639698][ T1002] bond5 (unregistering): Released all slaves [ 823.758994][ T1002] bond6 (unregistering): Released all slaves [ 823.871123][ T1002] bond7 (unregistering): Released all slaves [ 823.885193][ T1002] bond8 (unregistering): Released all slaves [ 823.899032][ T1002] bond9 (unregistering): Released all slaves [ 823.983437][ T5830] Bluetooth: hci1: command tx timeout [ 824.032748][ T1002] bond10 (unregistering): (slave bond11): Releasing backup interface [ 824.040944][ T1002] bond11 (unregistering): left promiscuous mode [ 824.049837][ T1002] bond10 (unregistering): Released all slaves [ 824.203083][ T1002] bond11 (unregistering): Released all slaves [ 824.348670][ T1002] bond12 (unregistering): Released all slaves [ 824.363140][T21036] ip6_vti0 speed is unknown, defaulting to 1000 [ 824.370039][T21036] syz2: Port: 1 Link DOWN [ 824.379507][T21036] ip6_vti0 speed is unknown, defaulting to 1000 [ 824.558912][T24468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6776'. [ 824.817510][T24459] ip6_vti0 speed is unknown, defaulting to 1000 [ 825.134375][T24459] wlan0 speed is unknown, defaulting to 1000 [ 825.186312][T24456] ip6_vti0 speed is unknown, defaulting to 1000 [ 825.520548][T24462] ip6_vti0 speed is unknown, defaulting to 1000 [ 825.530003][T24456] wlan0 speed is unknown, defaulting to 1000 [ 825.839582][T24462] wlan0 speed is unknown, defaulting to 1000 [ 825.839637][T24463] ip6_vti0 speed is unknown, defaulting to 1000 [ 826.005311][T24463] wlan0 speed is unknown, defaulting to 1000 [ 826.022000][ T1116] smc: removing ib device syz2 [ 826.066056][ T5830] Bluetooth: hci1: command tx timeout [ 827.410120][T24463] chnl_net:caif_netlink_parms(): no params data found [ 828.141679][ T5830] Bluetooth: hci1: command tx timeout [ 828.762343][T24463] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.769588][T24463] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.776991][T24463] bridge_slave_0: entered allmulticast mode [ 828.801891][T24463] bridge_slave_0: entered promiscuous mode [ 828.829374][T24463] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.841531][T24463] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.848870][T24463] bridge_slave_1: entered allmulticast mode [ 828.895216][T24463] bridge_slave_1: entered promiscuous mode [ 829.268248][T24463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 829.289526][T24463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.390304][T24491] netlink: 'syz.4.6780': attribute type 1 has an invalid length. [ 829.492069][T24491] 8021q: adding VLAN 0 to HW filter on device bond16 [ 829.516863][T24463] team0: Port device team_slave_0 added [ 829.563522][T24463] team0: Port device team_slave_1 added [ 829.724847][T24499] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6781'. [ 829.742085][T24463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 829.761596][T24463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 829.797397][T24463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 829.823411][T24463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 829.830703][T24463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 829.857671][T24463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 830.093765][T24463] hsr_slave_0: entered promiscuous mode [ 830.100914][T24463] hsr_slave_1: entered promiscuous mode [ 830.110195][T24463] debugfs: 'hsr0' already exists in 'hsr' [ 830.127163][T24463] Cannot create hsr debugfs directory [ 830.221542][ T5830] Bluetooth: hci1: command tx timeout [ 830.348105][T24504] syzkaller0: left promiscuous mode [ 830.359487][T24504] syzkaller0: left allmulticast mode [ 830.365926][T24504] veth19: left promiscuous mode [ 830.703036][T24463] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 830.721874][T24463] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 830.734159][T24463] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 830.757875][T24463] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 830.936248][ T1002] tipc: Disabling bearer [ 830.962255][ T1002] tipc: Left network mode [ 830.967338][T24463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.054485][T24463] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.104470][T24519] syz_tun: left allmulticast mode [ 831.109682][T24519] dvmrp8: left allmulticast mode [ 831.176075][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.185242][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.200599][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.207960][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 831.876987][T24463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 832.244181][T24540] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6788'. [ 832.513598][T24546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6789'. [ 832.542111][T24546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6789'. [ 832.567081][T24546] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6789'. [ 832.825119][T24553] netlink: 136 bytes leftover after parsing attributes in process `syz.0.6790'. [ 832.825824][T24463] veth0_vlan: entered promiscuous mode [ 832.859665][T24463] veth1_vlan: entered promiscuous mode [ 832.974019][T24515] wlan0 speed is unknown, defaulting to 1000 [ 832.995850][T24463] veth0_macvtap: entered promiscuous mode [ 833.040373][T24463] veth1_macvtap: entered promiscuous mode [ 833.420707][ T1002] `: left allmulticast mode [ 833.794427][T24565] netlink: 'syz.0.6792': attribute type 13 has an invalid length. [ 833.803378][T24565] netlink: 'syz.0.6792': attribute type 17 has an invalid length. [ 834.849857][ T12] smc: removing ib device !yz! [ 835.455626][T24565] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 835.539150][T24463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 835.610698][T24463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 835.662851][ T79] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.694653][ T79] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.753220][ T79] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.771446][ T79] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.777896][T24576] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6794'. [ 835.789702][T24576] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6794'. [ 835.811458][T24576] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6794'. [ 836.026426][T24579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6795'. [ 836.262134][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.278157][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.628760][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.648198][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.727803][T24593] wg1: left promiscuous mode [ 836.736700][T24593] wg1: left allmulticast mode [ 837.298723][T24566] wlan0 speed is unknown, defaulting to 1000 [ 837.717877][T24611] netlink: 'syz.3.6800': attribute type 13 has an invalid length. [ 837.753185][T24611] netlink: 'syz.3.6800': attribute type 17 has an invalid length. [ 838.040837][T24615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 838.222214][T24611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.237028][T24611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 838.580997][T24620] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.588899][T24620] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.850121][T24620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 838.875318][T24620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 839.046201][ T1160] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.055693][ T1160] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.065268][ T1160] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.065277][T24610] wlan0 speed is unknown, defaulting to 1000 [ 839.127793][ T1160] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.165551][ T1002] IPVS: stop unused estimator thread 0... [ 839.584078][T24613] wlan0 speed is unknown, defaulting to 1000 [ 839.585869][T24633] netlink: 240 bytes leftover after parsing attributes in process `syz.5.6806'. [ 839.620325][T24635] netlink: 'syz.5.6806': attribute type 13 has an invalid length. [ 840.009430][T24631] Set syz1 is full, maxelem 6117 reached [ 840.537515][T24628] wlan0 speed is unknown, defaulting to 1000 [ 840.620902][T24626] wlan0 speed is unknown, defaulting to 1000 [ 841.713310][T24662] bond1: left promiscuous mode [ 841.718253][T24662] bond1: left allmulticast mode [ 841.724448][T24662] ip6gre1: left promiscuous mode [ 841.729718][T24662] xfrm2: left promiscuous mode [ 841.734832][T24662] xfrm2: left allmulticast mode [ 841.742353][T24662] bridge2: left allmulticast mode [ 841.748909][T24662] bond3: left promiscuous mode [ 841.754031][T24662] bond4: left promiscuous mode [ 841.760106][T24662] gretap1: left allmulticast mode [ 841.770510][T24662] veth13: left promiscuous mode [ 841.776556][T24662] bond10: left allmulticast mode [ 841.782049][T24662] ip6gretap1: left allmulticast mode [ 841.790171][T24662] tipc: Resetting bearer [ 841.800874][T24662] syzkaller0: left promiscuous mode [ 841.806700][T24662] syzkaller0: left allmulticast mode [ 841.813548][T24662] macvtap1: left promiscuous mode [ 841.818714][T24662] macvtap1: left allmulticast mode [ 841.824857][T24662] bond15: left promiscuous mode [ 841.830984][T24662] gre2: left promiscuous mode [ 841.887792][ T1160] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.896935][ T1160] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.910310][ T1160] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.932121][ T1160] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.230289][T24670] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6814'. [ 842.320264][T24670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6814'. [ 842.669686][T24669] wlan0 speed is unknown, defaulting to 1000 [ 843.311833][T24691] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 843.319413][T24691] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 843.330376][T24691] tipc: Resetting bearer [ 843.343095][T24691] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig [ 843.367447][T24681] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6818'. [ 843.701805][T24700] netlink: 'syz.5.6824': attribute type 2 has an invalid length. [ 843.739385][T24700] : entered promiscuous mode [ 843.819913][T24700] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6824'. [ 844.097804][T24706] IPVS: Scheduler module ip_vs_sip not found [ 844.397821][T24687] wlan0 speed is unknown, defaulting to 1000 [ 844.430764][T24715] netlink: 'syz.5.6826': attribute type 13 has an invalid length. [ 844.440337][T24715] netlink: 'syz.5.6826': attribute type 17 has an invalid length. [ 844.717758][T24715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 844.727711][T24715] 8021q: adding VLAN 0 to HW filter on device team0 [ 844.773477][T24715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 845.365375][T24716] wlan0 speed is unknown, defaulting to 1000 [ 845.810388][T24726] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6829'. [ 845.857482][T24726] nbd: nbd0 already in use [ 845.862871][T24726] block nbd0: NBD_DISCONNECT [ 845.867515][T24726] block nbd0: Send disconnect failed -32 [ 845.874072][T24726] block nbd0: shutting down sockets [ 846.627117][T24733] wlan0 speed is unknown, defaulting to 1000 [ 847.294642][T24759] tipc: Enabling of bearer rejected, already enabled [ 847.297793][T24758] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6837'. [ 847.313824][T24755] syzkaller0: entered promiscuous mode [ 847.319827][T24755] syzkaller0: entered allmulticast mode [ 848.375187][T24758] wlan0 speed is unknown, defaulting to 1000 [ 849.142216][T24780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6842'. [ 849.159575][T24780] bridge_slave_1: left allmulticast mode [ 849.168352][T24780] bridge_slave_1: left promiscuous mode [ 849.180532][T24780] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.213964][T24780] bridge_slave_0: left allmulticast mode [ 849.230017][T24780] bridge_slave_0: left promiscuous mode [ 849.242408][T24780] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.347306][T24780] bond8: (slave bridge0): Releasing backup interface [ 849.494907][T24787] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 850.015481][T24791] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 850.324662][T24805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6847'. [ 850.395711][T24809] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 850.763832][T24810] veth0_to_team: left promiscuous mode [ 850.770127][T24810] tipc: Resetting bearer [ 850.798249][T24810] syzkaller0: left promiscuous mode [ 850.811602][T24810] syzkaller0: left allmulticast mode [ 850.868555][T24790] wlan0 speed is unknown, defaulting to 1000 [ 850.901579][T24813] tipc: Resetting bearer [ 851.165441][T24820] netlink: 'syz.1.6851': attribute type 3 has an invalid length. [ 851.234149][T24823] netlink: 'syz.3.6852': attribute type 1 has an invalid length. [ 851.343590][T24823] 8021q: adding VLAN 0 to HW filter on device bond13 [ 851.373229][T24825] bond13: (slave geneve4): making interface the new active one [ 851.411904][T24825] bond13: (slave geneve4): Enslaving as an active interface with an up link [ 851.433859][ T1116] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.442361][ T1116] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.453893][T24827] bridge9: entered allmulticast mode [ 851.459424][T24802] wlan0 speed is unknown, defaulting to 1000 [ 851.462767][T24820] dvmrp8: left allmulticast mode [ 851.509279][ T1116] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.535237][T24824] siw: device registration error -23 [ 851.541388][ T1116] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.598882][T24830] tipc: Failed to remove unknown binding: 66,1,1/469497681:2144121771/2144121773 [ 851.652949][T24829] tipc: Failed to remove unknown binding: 66,1,1/469497681:2144121771/2144121773 [ 851.672039][T24829] tipc: Failed to remove unknown binding: 66,1,1/469497681:2144121771/2144121773 [ 851.702044][T24824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 851.710798][T24824] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.724595][T24824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 851.862966][T24819] bridge9: left allmulticast mode [ 852.607663][T24839] wlan0 speed is unknown, defaulting to 1000 [ 853.013297][T24860] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6860'. [ 853.127154][T24860] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6860'. [ 853.253241][T24862] syzkaller0: entered allmulticast mode [ 853.418240][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.434904][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.090616][T24878] syzkaller0: entered promiscuous mode [ 854.097886][T24878] syzkaller0: entered allmulticast mode [ 856.107086][T24874] wlan0 speed is unknown, defaulting to 1000 [ 856.748540][T24902] wlan0 speed is unknown, defaulting to 1000 [ 857.584113][T24925] netlink: 'syz.0.6873': attribute type 13 has an invalid length. [ 857.610948][T24925] netlink: 'syz.0.6873': attribute type 17 has an invalid length. [ 857.640963][T24925] erspan0: left promiscuous mode [ 857.755615][T24925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.770568][T24925] 8021q: adding VLAN 0 to HW filter on device ` [ 857.794004][T24925] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 857.920769][T24912] wlan0 speed is unknown, defaulting to 1000 [ 857.988113][T24935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 858.992789][T24949] syzkaller0: entered promiscuous mode [ 859.002387][T24949] tipc: Resetting bearer [ 859.174232][T24951] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6879'. [ 859.222479][T24927] wlan0 speed is unknown, defaulting to 1000 [ 859.295712][T24937] wlan0 speed is unknown, defaulting to 1000 [ 860.060923][T24963] netlink: 'syz.4.6881': attribute type 12 has an invalid length. [ 860.209037][T24967] netlink: 'syz.4.6881': attribute type 4 has an invalid length. [ 860.302582][T24965] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 860.320130][T24965] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 861.274430][T24991] bond0: (slave team0): Releasing backup interface [ 861.287247][T24991] team0: left promiscuous mode [ 861.300860][T24991] team_slave_0: left promiscuous mode [ 861.341130][T24991] team_slave_1: left promiscuous mode [ 861.406015][T24997] netlink: 'syz.3.6885': attribute type 13 has an invalid length. [ 861.416577][T24997] netlink: 'syz.3.6885': attribute type 17 has an invalid length. [ 861.425375][T24991] bond4: (slave dummy0): Releasing active interface [ 861.524773][T24991] veth0_to_bond: left allmulticast mode [ 861.540213][T24991] veth0_to_bond: left promiscuous mode [ 861.560220][T24991] bridge11: port 2(veth0_to_bond) entered disabled state [ 861.599515][T24991] bond0: (slave bond_slave_0): Releasing backup interface [ 861.642646][T24991] bond_slave_0: left promiscuous mode [ 861.662922][T24991] team0: Port device team_slave_0 removed [ 861.680157][T24991] team0: Port device team_slave_1 removed [ 861.696087][T24991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 861.739771][T24991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.783575][T24991] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 861.822013][T24995] team0: Mode changed to "activebackup" [ 861.870311][T25008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 861.929977][T24997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.981703][T24997] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 862.033741][T25002] netlink: 'syz.4.6886': attribute type 4 has an invalid length. [ 862.888001][T25031] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6893'. [ 862.966332][T25031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6893'. [ 863.127704][T25000] wlan0 speed is unknown, defaulting to 1000 [ 863.857814][T25017] wlan0 speed is unknown, defaulting to 1000 [ 863.883103][T25027] wlan0 speed is unknown, defaulting to 1000 [ 864.188700][T25050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6898'. [ 864.212102][T25050] netlink: 'syz.4.6898': attribute type 5 has an invalid length. [ 864.220122][T25050] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6898'. [ 864.374864][T25050] geneve5: entered promiscuous mode [ 864.382330][T25050] geneve5: entered allmulticast mode [ 864.390369][ T1116] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 864.398746][T25041] wlan0 speed is unknown, defaulting to 1000 [ 864.444696][ T1116] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 864.521674][ T1116] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 864.542091][ T1116] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 864.821548][T25055] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 865.419876][T25066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6901'. [ 865.532279][T25069] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6900'. [ 865.858076][T25075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6903'. [ 865.896017][ T30] audit: type=1800 audit(1762400510.397:19): pid=25068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6901" name="memory.events" dev="tmpfs" ino=7197 res=0 errno=0 [ 865.939265][T25076] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6902'. [ 866.349657][T25073] wlan0 speed is unknown, defaulting to 1000 [ 866.800753][T25087] wlan0 speed is unknown, defaulting to 1000 [ 866.853258][T25094] netlink: 'syz.1.6908': attribute type 10 has an invalid length. [ 866.862286][ T5830] Bluetooth: hci0: command tx timeout [ 866.896427][T25094] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.917258][T25094] team0: entered promiscuous mode [ 866.926742][T25094] bond0: (slave team0): Enslaving as an active interface with an up link [ 866.999838][T25094] netlink: 'syz.1.6908': attribute type 1 has an invalid length. [ 867.065490][T25098] raw_sendmsg: syz.1.6908 forgot to set AF_INET. Fix it! [ 867.308773][T25102] netlink: 'syz.3.6909': attribute type 16 has an invalid length. [ 867.316937][T25102] netlink: 'syz.3.6909': attribute type 17 has an invalid length. [ 867.623094][T25102] tipc: Resetting bearer [ 867.706150][T25116] netlink: 'syz.5.6912': attribute type 1 has an invalid length. [ 867.981314][ T79] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.012856][ T79] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.241143][T25116] 8021q: adding VLAN 0 to HW filter on device bond1 [ 868.301032][T25118] bond1: (slave geneve2): making interface the new active one [ 868.310493][T25118] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 868.354598][ T79] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.391712][ T79] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.455065][T25108] wlan0 speed is unknown, defaulting to 1000 [ 868.461152][ T79] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.496729][ T79] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.526409][ T79] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.557290][ T79] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.538217][T25111] wlan0 speed is unknown, defaulting to 1000 [ 870.069063][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.390168][T25149] netlink: 240 bytes leftover after parsing attributes in process `syz.4.6920'. [ 870.423471][T25149] netlink: 'syz.4.6920': attribute type 13 has an invalid length. [ 870.770386][ T36] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 870.804592][ T36] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 870.861407][ T36] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 870.869884][ T36] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 870.922595][T25151] wlan0 speed is unknown, defaulting to 1000 [ 871.207738][T25167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.229729][T25167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 871.665878][T25174] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6926'. [ 871.694595][T25152] wlan0 speed is unknown, defaulting to 1000 [ 871.706747][T25174] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6926'. [ 871.732753][T25174] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6926'. [ 872.078494][T25183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6929'. [ 872.202809][T13034] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 872.220146][T25181] geneve5: left promiscuous mode [ 872.232409][T25181] geneve5: left allmulticast mode [ 872.287204][T25188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6930'. [ 872.433201][T25190] netlink: 'syz.5.6931': attribute type 2 has an invalid length. [ 872.660107][T25195] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 872.941963][T21030] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 873.101803][ T79] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 873.310935][T25211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6936'. [ 874.142979][ T1116] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 874.172843][ T1116] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 874.260728][T25232] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 874.511570][T21030] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 874.560300][T25243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6944'. [ 874.822686][T25246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6945'. [ 875.353162][T25255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 875.361054][T25255] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 875.458025][T25257] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6949'. [ 875.500333][T25257] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6949'. [ 875.569869][T25257] syz_tun: entered promiscuous mode [ 875.585274][T25257] hsr1: Slave A (`) is not up; please bring it up to get a fully working HSR network [ 875.942887][T25261] wlan0 speed is unknown, defaulting to 1000 [ 875.977927][T25283] netlink: 'syz.3.6953': attribute type 1 has an invalid length. [ 875.990710][T25283] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6953'. [ 876.420641][T25295] netlink: 'syz.0.6956': attribute type 13 has an invalid length. [ 876.437134][T25295] netlink: 'syz.0.6956': attribute type 17 has an invalid length. [ 876.451436][T25295] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 876.599515][T25286] wlan0 speed is unknown, defaulting to 1000 [ 876.666212][T25266] wlan0 speed is unknown, defaulting to 1000 [ 876.870103][T25301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6958'. [ 876.944016][T25301] netlink: 'syz.3.6958': attribute type 11 has an invalid length. [ 877.193914][T25295] wlan0 speed is unknown, defaulting to 1000 [ 877.210617][T25291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 877.901443][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 877.983339][T25310] xt_limit: Overflow, try lower: 271964/0 [ 878.049402][T25310] netlink: 25 bytes leftover after parsing attributes in process `syz.0.6960'. [ 878.124265][T25314] netlink: 'syz.4.6961': attribute type 2 has an invalid length. [ 878.142925][T25314] netlink: 'syz.4.6961': attribute type 2 has an invalid length. [ 878.213901][T25310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6960'. [ 878.356349][T25320] netlink: 332 bytes leftover after parsing attributes in process `syz.1.6963'. [ 878.365811][T25320] netlink: 'syz.1.6963': attribute type 9 has an invalid length. [ 878.382122][T25320] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6963'. [ 878.395808][T25320] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6963'. [ 878.463277][T25326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6965'. [ 878.802231][T25324] syzkaller0: left promiscuous mode [ 878.807855][T25324] syzkaller0: left allmulticast mode [ 878.821870][T25323] bond0: (slave team0): Releasing backup interface [ 878.834909][T25323] team0: left promiscuous mode [ 878.849683][T25323] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 878.866938][T25320] lo: Caught tx_queue_len zero misconfig [ 878.907104][T25314] wlan0 speed is unknown, defaulting to 1000 [ 878.913517][T25330] veth0: entered promiscuous mode [ 878.973955][T25331] veth0 (unregistering): left promiscuous mode [ 879.665769][T25353] netlink: 'syz.1.6969': attribute type 72 has an invalid length. [ 879.749354][T25355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 879.778497][T25355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 880.079515][T25352] tipc: Resetting bearer [ 880.092616][T25352] syzkaller0: left promiscuous mode [ 880.100492][T25352] syzkaller0: left allmulticast mode [ 880.132295][T25334] wlan0 speed is unknown, defaulting to 1000 [ 880.907725][ T1002] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.921348][ T1002] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.940620][ T1002] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.949943][ T1002] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.593114][T25363] wlan0 speed is unknown, defaulting to 1000 [ 881.605169][T25348] wlan0 speed is unknown, defaulting to 1000 [ 881.617580][T25358] wlan0 speed is unknown, defaulting to 1000 [ 882.168556][T25361] wlan0 speed is unknown, defaulting to 1000 [ 882.179923][T25374] rdma_rxe: rxe_newlink: failed to add lo [ 883.449704][T25393] __nla_validate_parse: 3 callbacks suppressed [ 883.449725][T25393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6976'. [ 883.463755][T25390] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6977'. [ 883.485430][T25393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6976'. [ 883.508051][T25393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6976'. [ 884.527934][T25412] netlink: 6 bytes leftover after parsing attributes in process `syz.1.6981'. [ 884.572990][T25412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 885.313229][T25416] wlan0 speed is unknown, defaulting to 1000 [ 885.518523][T25426] wlan0 speed is unknown, defaulting to 1000 [ 885.950254][T25440] netlink: 256 bytes leftover after parsing attributes in process `syz.5.6988'. [ 885.977823][T25438] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6988'. [ 886.225774][T25441] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 886.264981][T25419] wlan0 speed is unknown, defaulting to 1000 [ 886.483940][T25444] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode [ 886.808956][T25448] bridge_slave_0: left allmulticast mode [ 886.831542][T25444] netlink: 'syz.5.6989': attribute type 10 has an invalid length. [ 886.841462][T25448] bridge_slave_0: left promiscuous mode [ 886.869169][T25448] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.025490][T25448] bridge_slave_1: left allmulticast mode [ 887.031639][T25448] bridge_slave_1: left promiscuous mode [ 887.037621][T25448] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.121838][T25448] bond0: (slave bond_slave_0): Releasing backup interface [ 887.134317][T25448] bond0: (slave bond_slave_1): Releasing backup interface [ 887.146393][T25448] team0: Port device team_slave_0 removed [ 887.154872][T25448] team0: Port device team_slave_1 removed [ 887.161127][T25448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 887.169592][T25448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 887.178269][T25448] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 887.195278][T25444] mac80211_hwsim hwsim28 wlan1: left allmulticast mode [ 887.204176][T25444] bond0: (slave wlan1): Opening slave failed [ 887.219864][T25450] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 887.230442][T25450] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 887.240663][T25450] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 887.390228][T25458] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6992'. [ 887.690596][T25463] Bluetooth: MGMT ver 1.23 [ 887.894832][T25467] veth0: entered promiscuous mode [ 888.179558][T25467] netlink: 'syz.3.6995': attribute type 16 has an invalid length. [ 888.206722][T25467] netlink: 'syz.3.6995': attribute type 17 has an invalid length. [ 888.314912][T25467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.372851][T25467] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 888.399679][T25482] netlink: 'syz.0.6994': attribute type 3 has an invalid length. [ 888.416414][T25462] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 888.558782][T25471] bond0: Caught tx_queue_len zero misconfig [ 888.586252][T10924] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 888.766538][T25465] wlan0 speed is unknown, defaulting to 1000 [ 888.821873][ T1116] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 888.862035][T25473] wlan0 speed is unknown, defaulting to 1000 [ 889.037175][T25467] veth0: left promiscuous mode [ 889.132659][T25496] netlink: 'syz.1.7001': attribute type 1 has an invalid length. [ 889.229316][T25504] syzkaller0: entered promiscuous mode [ 889.235135][T25504] syzkaller0: entered allmulticast mode [ 889.290563][T25496] 8021q: adding VLAN 0 to HW filter on device bond11 [ 889.339912][T25503] bond11: (slave geneve3): making interface the new active one [ 889.349998][T25503] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 889.375277][T25490] wlan0 speed is unknown, defaulting to 1000 [ 889.439383][ T1116] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.448556][ T1116] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.584515][T10924] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 889.618052][ T1116] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.652281][ T1116] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.902786][ T1116] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 889.923241][ T1116] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 890.393344][T25525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7009'. [ 890.418004][T25525] macvtap0: entered promiscuous mode [ 890.425511][T25525] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 890.494990][T25529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7009'. [ 890.542055][T21042] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 890.573216][T25532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7011'. [ 891.042078][T25534] wlan0 speed is unknown, defaulting to 1000 [ 891.357297][T25547] syzkaller0: entered promiscuous mode [ 891.383086][T25547] syzkaller0: entered allmulticast mode [ 891.474826][T25550] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7016'. [ 891.740242][T25552] netlink: 'syz.5.7017': attribute type 1 has an invalid length. [ 891.904344][T25570] netlink: 100 bytes leftover after parsing attributes in process `syz.5.7017'. [ 892.237598][T25560] gretap1: entered allmulticast mode [ 892.288197][T25560] bond2: (slave gretap1): making interface the new active one [ 892.322912][T25560] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 892.553450][T25573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7020'. [ 892.726274][T25592] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7023'. [ 893.247717][T25606] netlink: 'syz.5.7028': attribute type 6 has an invalid length. [ 893.353453][T25566] wlan0 speed is unknown, defaulting to 1000 [ 893.477016][T25613] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7030'. [ 893.781813][T25602] wlan0 speed is unknown, defaulting to 1000 [ 893.981414][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 894.497437][T25628] netlink: 'syz.5.7034': attribute type 1 has an invalid length. [ 894.506604][T25630] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7034'. [ 894.573069][T25630] macsec1: entered promiscuous mode [ 894.601070][T25628] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7034'. [ 894.681485][T25628] NCSI netlink: No device for ifindex 0 [ 894.922041][T25630] gretap0: entered promiscuous mode [ 894.927431][T25630] macsec1: entered allmulticast mode [ 894.968818][T25630] gretap0: entered allmulticast mode [ 894.996359][T25630] gretap0: left allmulticast mode [ 895.002057][T25630] gretap0: left promiscuous mode [ 895.244725][T25626] wlan0 speed is unknown, defaulting to 1000 [ 895.518109][T25640] sctp: [Deprecated]: syz.4.7036 (pid 25640) Use of int in max_burst socket option. [ 895.518109][T25640] Use struct sctp_assoc_value instead [ 895.591961][T25642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7036'. [ 897.048852][T25679] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 897.108073][T25681] ip6tnl0: Caught tx_queue_len zero misconfig [ 897.297159][T25681] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7046'. [ 897.381138][T25654] wlan0 speed is unknown, defaulting to 1000 [ 897.402351][T25681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7046'. [ 897.500044][T25681] hsr_slave_0: left promiscuous mode [ 897.600933][T25681] hsr_slave_1: left promiscuous mode [ 898.586843][T25700] pim6reg1: entered promiscuous mode [ 898.612045][T25700] pim6reg1: entered allmulticast mode [ 899.199871][T25691] wlan0 speed is unknown, defaulting to 1000 [ 899.213853][T25686] wlan0 speed is unknown, defaulting to 1000 [ 899.275496][T25672] wlan0 speed is unknown, defaulting to 1000 [ 899.978959][T25718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7053'. [ 900.250709][T25718] 8021q: adding VLAN 0 to HW filter on device bond17 [ 900.386480][T25720] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 900.399653][T25720] bond17: (slave macvlan2): Enslaving as an active interface with an up link [ 900.441810][T25723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7054'. [ 900.510866][T25724] netlink: 'syz.1.7054': attribute type 2 has an invalid length. [ 900.836535][T25737] netlink: 'syz.1.7059': attribute type 13 has an invalid length. [ 900.847761][T25737] netlink: 'syz.1.7059': attribute type 17 has an invalid length. [ 900.848763][T25738] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7058'. [ 900.994315][T25737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 901.024633][T25737] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.048864][T25737] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 901.298589][T25752] netlink: 'syz.1.7061': attribute type 1 has an invalid length. [ 901.440397][T25752] 8021q: adding VLAN 0 to HW filter on device bond12 [ 901.609909][T25756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7062'. [ 901.893651][T25768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7065'. [ 902.061424][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 902.251571][T25761] wlan0 speed is unknown, defaulting to 1000 [ 902.355260][T25780] netlink: 'syz.4.7066': attribute type 12 has an invalid length. [ 903.667341][T25783] wlan0 speed is unknown, defaulting to 1000 [ 903.704462][T25765] wlan0 speed is unknown, defaulting to 1000 [ 903.754211][T25774] wlan0 speed is unknown, defaulting to 1000 [ 903.857290][T25801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7071'. [ 904.162282][T25791] wlan0 speed is unknown, defaulting to 1000 [ 904.258537][T25804] netlink: 'syz.4.7072': attribute type 1 has an invalid length. [ 904.385811][T25804] 8021q: adding VLAN 0 to HW filter on device bond17 [ 906.300635][T25827] wlan0 speed is unknown, defaulting to 1000 [ 906.797027][T25849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7081'. [ 906.954321][T25850] syz.3.7080 (25850) used obsolete PPPIOCDETACH ioctl [ 907.217141][T25855] ipvlan2: entered promiscuous mode [ 907.223777][T25855] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 907.484058][T25835] wlan0 speed is unknown, defaulting to 1000 [ 907.799025][T25858] netlink: 'syz.1.7083': attribute type 1 has an invalid length. [ 908.121597][T25858] 8021q: adding VLAN 0 to HW filter on device bond13 [ 908.231490][T25867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7085'. [ 908.601959][T25881] netlink: 'syz.5.7087': attribute type 12 has an invalid length. [ 908.624496][T25881] netlink: 'syz.5.7087': attribute type 4 has an invalid length. [ 908.838229][T25885] ip6t_REJECT: ECHOREPLY is not supported [ 908.871934][T25885] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7089'. [ 908.938815][T25885] netlink: 596 bytes leftover after parsing attributes in process `syz.0.7089'. [ 909.203205][T25884] wlan0 speed is unknown, defaulting to 1000 [ 910.843541][T25915] syzkaller0: entered promiscuous mode [ 910.849310][T25915] syzkaller0: entered allmulticast mode [ 910.877279][T25894] wlan0 speed is unknown, defaulting to 1000 [ 911.035370][T25922] netlink: 'syz.0.7097': attribute type 1 has an invalid length. [ 911.222329][T25922] 8021q: adding VLAN 0 to HW filter on device bond18 [ 911.437371][T25931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7099'. [ 911.652657][T25913] wlan0 speed is unknown, defaulting to 1000 [ 912.941422][ T5846] Bluetooth: hci1: command 0x0405 tx timeout [ 913.443417][T25957] netlink: 268 bytes leftover after parsing attributes in process `syz.0.7105'. [ 913.596355][T25952] wlan0 speed is unknown, defaulting to 1000 [ 913.756196][T25966] siw: device registration error -23 [ 913.982029][T25970] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 914.000373][T25970] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 914.005606][T25975] netlink: 'syz.3.7109': attribute type 1 has an invalid length. [ 914.016667][T25970] tipc: Resetting bearer [ 914.206886][T25975] 8021q: adding VLAN 0 to HW filter on device bond14 [ 914.363274][T25979] tipc: Resetting bearer [ 914.394741][T25979] syzkaller0: left promiscuous mode [ 914.400212][T25979] syzkaller0: left allmulticast mode [ 915.270845][T25993] tipc: Resetting bearer [ 915.302603][T26006] tipc: Resetting bearer [ 915.778861][T26021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7118'. [ 915.791469][T25999] wlan0 speed is unknown, defaulting to 1000 [ 916.366568][T26027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7119'. [ 916.376352][T26028] wg1 speed is unknown, defaulting to 1000 [ 916.383843][T26028] wg1 speed is unknown, defaulting to 1000 [ 916.534507][T26028] wg1 speed is unknown, defaulting to 1000 [ 916.563292][T26029] xt_TCPMSS: Only works on TCP SYN packets [ 916.598825][T26028] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 916.694631][T26028] wg1 speed is unknown, defaulting to 1000 [ 916.703933][T26028] wg1 speed is unknown, defaulting to 1000 [ 916.714678][T26028] wg1 speed is unknown, defaulting to 1000 [ 916.725014][T26028] wg1 speed is unknown, defaulting to 1000 [ 916.735412][T26028] wg1 speed is unknown, defaulting to 1000 [ 916.867348][T26041] netlink: 'syz.0.7122': attribute type 1 has an invalid length. [ 916.979370][T26041] 8021q: adding VLAN 0 to HW filter on device bond19 [ 917.142070][T26050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7124'. [ 917.467263][T26062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7126'. [ 917.586406][T26065] netlink: 'syz.1.7126': attribute type 14 has an invalid length. [ 917.735274][T26062] vlan1: entered promiscuous mode [ 917.777957][T26063] netlink: 'syz.4.7127': attribute type 16 has an invalid length. [ 917.803525][T26063] netlink: 'syz.4.7127': attribute type 17 has an invalid length. [ 917.964173][T26063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 918.004195][T26063] 8021q: adding VLAN 0 to HW filter on device team0 [ 918.087610][T26063] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 918.153973][T26056] wlan0 speed is unknown, defaulting to 1000 [ 918.197523][T26056] wg1 speed is unknown, defaulting to 1000 [ 918.232618][T21049] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 918.461557][T21049] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 918.642225][ T1160] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 919.219115][T26061] wlan0 speed is unknown, defaulting to 1000 [ 919.294981][T26076] wlan0 speed is unknown, defaulting to 1000 [ 919.294997][T26061] wg1 speed is unknown, defaulting to 1000 [ 919.366832][T26076] wg1 speed is unknown, defaulting to 1000 [ 919.634589][T26092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7133'. [ 919.684444][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 919.701624][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 920.000203][T26101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7134'. [ 920.144966][T26078] wlan0 speed is unknown, defaulting to 1000 [ 920.182479][T26078] wg1 speed is unknown, defaulting to 1000 [ 920.279878][T26107] netlink: 'syz.5.7136': attribute type 1 has an invalid length. [ 920.449511][T26107] 8021q: adding VLAN 0 to HW filter on device bond3 [ 920.461563][T21049] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 920.771085][T26111] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7137'. [ 920.815948][T26111] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7137'. [ 921.296847][T26126] netlink: 'syz.4.7140': attribute type 54 has an invalid length. [ 921.838326][T26135] netlink: 'syz.3.7143': attribute type 8 has an invalid length. [ 921.913922][T26136] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7144'. [ 921.986309][T26136] vlan2: entered allmulticast mode [ 922.032215][T26136] erspan0: entered allmulticast mode [ 922.466893][T26132] wlan0 speed is unknown, defaulting to 1000 [ 922.483466][T26132] wg1 speed is unknown, defaulting to 1000 [ 922.636229][T26147] netlink: 'syz.5.7147': attribute type 1 has an invalid length. [ 922.768172][T26147] 8021q: adding VLAN 0 to HW filter on device bond4 [ 923.038158][T26162] netlink: 'syz.5.7149': attribute type 12 has an invalid length. [ 923.050730][T26162] netlink: 'syz.5.7149': attribute type 4 has an invalid length. [ 923.495814][T26135] wlan0 speed is unknown, defaulting to 1000 [ 923.514365][T26135] wg1 speed is unknown, defaulting to 1000 [ 923.520633][T26161] wlan0 speed is unknown, defaulting to 1000 [ 923.577594][T26161] wg1 speed is unknown, defaulting to 1000 [ 924.057561][T26175] netlink: 240 bytes leftover after parsing attributes in process `syz.5.7152'. [ 924.067002][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 924.350287][T26191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7157'. [ 925.540222][T26211] netlink: 'syz.1.7162': attribute type 6 has an invalid length. [ 925.576897][T26211] netlink: 'syz.1.7162': attribute type 6 has an invalid length. [ 925.700801][T26215] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7163'. [ 926.009397][T26222] tipc: Resetting bearer [ 926.025691][T26222] syzkaller0: left promiscuous mode [ 926.031425][T26222] syzkaller0: left allmulticast mode [ 926.051448][T26192] wlan0 speed is unknown, defaulting to 1000 [ 926.137836][T26192] wg1 speed is unknown, defaulting to 1000 [ 926.228694][T26231] netlink: 'syz.3.7168': attribute type 1 has an invalid length. [ 926.353380][T26231] bond15: entered promiscuous mode [ 926.377142][T26231] 8021q: adding VLAN 0 to HW filter on device bond15 [ 926.821145][T26234] wlan0 speed is unknown, defaulting to 1000 [ 926.829837][T26234] wg1 speed is unknown, defaulting to 1000 [ 926.920147][T26250] netlink: 'syz.0.7172': attribute type 1 has an invalid length. [ 926.928685][T26250] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7172'. [ 927.500824][T26259] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 927.756276][T26264] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7174'. [ 927.774766][T26263] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7175'. [ 927.906429][T26267] netlink: 'syz.4.7177': attribute type 1 has an invalid length. [ 927.943954][T26267] 8021q: adding VLAN 0 to HW filter on device bond18 [ 928.052957][T26271] netlink: 'syz.0.7178': attribute type 1 has an invalid length. [ 928.062040][T26272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7176'. [ 928.101120][T26271] 8021q: adding VLAN 0 to HW filter on device bond20 [ 928.722251][T26281] tipc: Resetting bearer [ 928.839025][T26281] syzkaller0: left promiscuous mode [ 928.921702][T26281] syzkaller0: left allmulticast mode [ 929.073939][T26281] vlan2: left allmulticast mode [ 929.091655][T26281] erspan0: left allmulticast mode [ 929.161019][T26303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7183'. [ 929.417107][T26308] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 929.492713][T26310] bond0: (slave gre0): Error: Device type is different from other slaves [ 929.525608][T26310] netlink: 'syz.0.7186': attribute type 39 has an invalid length. [ 929.531926][T26307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7185'. [ 929.703596][ T1160] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 929.777193][T26307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7185'. [ 929.805343][T26307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7185'. [ 929.824580][T26307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7185'. [ 930.332099][T26325] netlink: 'syz.1.7189': attribute type 1 has an invalid length. [ 930.381422][T26325] 8021q: adding VLAN 0 to HW filter on device bond14 [ 930.468213][T26327] syzkaller0: entered promiscuous mode [ 930.475754][T26327] syzkaller0: entered allmulticast mode [ 930.639358][T26336] tipc: Enabling of bearer rejected, already enabled [ 930.689073][T26336] tipc: Resetting bearer [ 930.762229][T26334] "syz.5.7196" (26334) uses obsolete ecb(arc4) skcipher [ 932.218454][T26346] wlan0 speed is unknown, defaulting to 1000 [ 932.308958][T26346] wg1 speed is unknown, defaulting to 1000 [ 932.763611][T26384] netlink: 'syz.0.7204': attribute type 1 has an invalid length. [ 932.944466][T26384] 8021q: adding VLAN 0 to HW filter on device bond21 [ 933.312084][T26390] __nla_validate_parse: 4 callbacks suppressed [ 933.312107][T26390] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7207'. [ 933.358805][T26393] tipc: Resetting bearer [ 933.383347][T26397] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7208'. [ 933.394240][T26393] syzkaller0: left promiscuous mode [ 933.411702][T26393] syzkaller0: left allmulticast mode [ 933.454543][T26394] syzkaller0: entered promiscuous mode [ 933.460086][T26394] syzkaller0: entered allmulticast mode [ 933.546442][T26403] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7209'. [ 933.585598][T26398] netlink: 4460 bytes leftover after parsing attributes in process `syz.1.7207'. [ 933.843133][T26408] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 933.882484][T26412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7213'. [ 934.026244][T26413] netlink: 'syz.5.7211': attribute type 12 has an invalid length. [ 934.542444][T26424] tipc: Enabling of bearer rejected, failed to enable media [ 934.734210][T26427] netlink: 116 bytes leftover after parsing attributes in process `syz.0.7217'. [ 935.210435][T26439] syzkaller0: entered promiscuous mode [ 935.222842][T26439] syzkaller0: entered allmulticast mode [ 935.704342][T26455] tipc: Resetting bearer [ 935.712033][T26455] syzkaller0: left promiscuous mode [ 935.717292][T26455] syzkaller0: left allmulticast mode [ 936.103539][T26461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7226'. [ 936.160173][T26461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7226'. [ 936.206408][T26462] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7226'. [ 936.254556][T26461] netlink: 'syz.1.7226': attribute type 4 has an invalid length. [ 936.313097][T26453] wlan0 speed is unknown, defaulting to 1000 [ 936.321865][T26453] wg1 speed is unknown, defaulting to 1000 [ 936.946248][T26344] Set syz1 is full, maxelem 65536 reached [ 937.244910][T26475] netlink: 'syz.1.7228': attribute type 4 has an invalid length. [ 937.865366][T26483] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 938.281904][T26487] team0: Mode changed to "loadbalance" [ 938.787111][T26499] netlink: 136 bytes leftover after parsing attributes in process `syz.1.7237'. [ 939.394908][T26522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7238'. [ 939.629891][T26495] Can't find ip_set type hash:ip$mec [ 939.762891][T26522] syz_tun (unregistering): left promiscuous mode [ 939.797680][T26523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7238'. [ 939.893855][T26532] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.108950][T26532] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.475300][T26532] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.730002][T26532] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.913520][ T1160] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.941288][T26535] wlan0 speed is unknown, defaulting to 1000 [ 940.949215][T26535] wg1 speed is unknown, defaulting to 1000 [ 940.960405][ T1160] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.016710][ T1116] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.079464][ T1116] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.244990][T26563] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7246'. [ 941.311897][T26567] netlink: 240 bytes leftover after parsing attributes in process `syz.0.7244'. [ 941.643268][T26573] netlink: 'syz.5.7248': attribute type 11 has an invalid length. [ 941.791469][T26573] netlink: 'syz.5.7248': attribute type 11 has an invalid length. [ 941.809813][T26573] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7248'. [ 941.926754][T26571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 942.112485][T26579] veth0: entered promiscuous mode [ 942.132607][T26579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7249'. [ 942.173136][T26566] wlan0 speed is unknown, defaulting to 1000 [ 942.181561][T26566] wg1 speed is unknown, defaulting to 1000 [ 942.359407][T26591] block nbd0: Unsupported socket: should be TCP or UNIX. [ 942.401500][T26593] netlink: 'syz.4.7252': attribute type 13 has an invalid length. [ 942.434203][T26579] veth0 (unregistering): left promiscuous mode [ 942.508766][T26579] vlan2 (unregistering): left allmulticast mode [ 942.527137][T26579] veth1 (unregistering): left allmulticast mode [ 942.537230][T26579] vlan2 (unregistering): left promiscuous mode [ 942.580539][T26579] veth1 (unregistering): left promiscuous mode [ 942.587818][T26579] bridge6: port 2(vlan2) entered disabled state [ 942.629494][T26593] tipc: Resetting bearer [ 942.929374][T26602] Bluetooth: MGMT ver 1.23 [ 943.877773][T26639] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7258'. [ 944.122949][T26641] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7259'. [ 944.572553][T26617] wlan0 speed is unknown, defaulting to 1000 [ 944.580436][T26617] wg1 speed is unknown, defaulting to 1000 [ 945.244758][T26652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.255789][T26652] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.270418][T26652] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 945.289063][T26631] wlan0 speed is unknown, defaulting to 1000 [ 945.301705][T26631] wg1 speed is unknown, defaulting to 1000 [ 945.414037][T13034] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 945.837716][T26661] tipc: Can't bind to reserved service type 1 [ 945.871708][T26661] netlink: 'syz.4.7263': attribute type 39 has an invalid length. [ 945.963099][T26662] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7263'. [ 946.001395][T26662] netlink: 43 bytes leftover after parsing attributes in process `syz.4.7263'. [ 946.010404][T26662] netlink: 'syz.4.7263': attribute type 5 has an invalid length. [ 946.041345][T26662] netlink: 43 bytes leftover after parsing attributes in process `syz.4.7263'. [ 946.095234][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 946.105885][T26653] wlan0 speed is unknown, defaulting to 1000 [ 946.116659][T26663] vlan1: entered allmulticast mode [ 946.148814][T21042] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 946.267406][T26653] wg1 speed is unknown, defaulting to 1000 [ 946.483172][T26668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7265'. [ 946.679629][T26677] netlink: 'syz.3.7267': attribute type 1 has an invalid length. [ 946.803130][T26677] 8021q: adding VLAN 0 to HW filter on device bond16 [ 947.079145][T26682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7278'. [ 947.102012][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 947.111845][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 947.228429][T26689] netlink: 6 bytes leftover after parsing attributes in process `syz.3.7268'. [ 947.360598][T26689] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 947.471626][T13034] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 948.820345][T26703] tipc: Resetting bearer [ 948.951725][T26703] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 949.056797][ T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.065742][ T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.082269][ T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.100946][ T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.197763][T26723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7273'. [ 949.739978][T26738] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 949.844033][T26743] netlink: 'syz.0.7279': attribute type 1 has an invalid length. [ 949.895806][T26743] 8021q: adding VLAN 0 to HW filter on device bond22 [ 950.167557][T26754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7281'. [ 950.752884][T26765] netlink: 'syz.3.7284': attribute type 6 has an invalid length. [ 950.773516][T26765] netlink: 'syz.3.7284': attribute type 6 has an invalid length. [ 950.861604][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 950.925656][T26761] wlan0 speed is unknown, defaulting to 1000 [ 950.933783][T26761] wg1 speed is unknown, defaulting to 1000 [ 951.662656][T26773] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7297'. [ 951.692186][T26773] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7297'. [ 951.726141][T26773] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7297'. [ 951.778043][T26773] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7297'. [ 952.293903][T26788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 952.364188][T26775] wlan0 speed is unknown, defaulting to 1000 [ 952.394968][T26775] wg1 speed is unknown, defaulting to 1000 [ 952.641607][T26794] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7291'. [ 952.853566][T26803] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7293'. [ 953.498467][T26819] gretap1: left allmulticast mode [ 953.531046][T26819] ipvlan2: left promiscuous mode [ 953.556693][T26822] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7296'. [ 953.570161][T26822] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7296'. [ 953.609212][T26822] bond15: option primary_reselect: invalid value (255) [ 953.623149][T26822] bond15 (unregistering): Released all slaves [ 954.449646][T26827] wlan0 speed is unknown, defaulting to 1000 [ 954.458508][T26827] wg1 speed is unknown, defaulting to 1000 [ 954.701446][ T5846] Bluetooth: hci1: command 0x0405 tx timeout [ 955.646148][T26861] netlink: 'syz.5.7306': attribute type 39 has an invalid length. [ 955.683150][T26837] wlan0 speed is unknown, defaulting to 1000 [ 955.702726][T26864] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7306'. [ 955.731496][T26864] netlink: 43 bytes leftover after parsing attributes in process `syz.5.7306'. [ 955.775022][T26864] netlink: 'syz.5.7306': attribute type 5 has an invalid length. [ 955.842041][T26864] netlink: 43 bytes leftover after parsing attributes in process `syz.5.7306'. [ 955.951416][T26837] wg1 speed is unknown, defaulting to 1000 [ 955.990222][T26865] vlan2: entered allmulticast mode [ 956.020588][T26865] bridge_slave_0: entered allmulticast mode [ 956.459647][T26875] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7310'. [ 957.783547][T26896] wlan0 speed is unknown, defaulting to 1000 [ 957.791776][T26896] wg1 speed is unknown, defaulting to 1000 [ 958.154893][T26905] netlink: 'syz.4.7315': attribute type 13 has an invalid length. [ 958.166690][T26905] netlink: 'syz.4.7315': attribute type 17 has an invalid length. [ 958.236009][T26912] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7317'. [ 958.372863][ T917] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 958.381557][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 958.411435][T26905] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 958.780250][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 958.794647][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 959.240849][T26941] netlink: 'syz.3.7323': attribute type 6 has an invalid length. [ 959.251010][T26941] netlink: 'syz.3.7323': attribute type 6 has an invalid length. [ 959.262038][ T917] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 959.376393][T26948] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7321'. [ 959.377938][T26945] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7325'. [ 959.617780][T26945] netlink: 4460 bytes leftover after parsing attributes in process `syz.3.7325'. [ 959.667710][ T917] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 960.235072][T26962] netlink: 'syz.1.7328': attribute type 16 has an invalid length. [ 960.261333][T26962] netlink: 'syz.1.7328': attribute type 17 has an invalid length. [ 960.329157][T26956] wlan0 speed is unknown, defaulting to 1000 [ 960.348237][T26956] wg1 speed is unknown, defaulting to 1000 [ 961.066465][T26980] gretap3: entered promiscuous mode [ 961.087299][T26986] netlink: 'syz.1.7335': attribute type 16 has an invalid length. [ 961.159519][T26986] netlink: 'syz.1.7335': attribute type 17 has an invalid length. [ 961.191968][T26979] netlink: 'syz.3.7333': attribute type 10 has an invalid length. [ 961.241120][T26983] geneve6: entered promiscuous mode [ 961.252266][T26983] geneve6: entered allmulticast mode [ 961.282562][T25586] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 47077 - 0 [ 961.311642][T25586] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 49274 - 0 [ 961.350939][T25586] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 47077 - 0 [ 961.384459][T25586] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 49274 - 0 [ 961.418246][T25586] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 47077 - 0 [ 961.451215][T25586] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 49274 - 0 [ 961.479409][T25586] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 47077 - 0 [ 961.509042][T25586] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 49274 - 0 [ 962.130039][T26994] syzkaller0: left promiscuous mode [ 962.146199][T26994] syzkaller0: left allmulticast mode [ 962.156630][T26994] geneve6: left promiscuous mode [ 962.161872][T26994] geneve6: left allmulticast mode [ 962.173163][T26982] wlan0 speed is unknown, defaulting to 1000 [ 962.177280][ T13] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 47077 - 0 [ 962.198027][ T13] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 49274 - 0 [ 962.212393][ T13] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 47077 - 0 [ 962.220866][ T13] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 49274 - 0 [ 962.232836][T26982] wg1 speed is unknown, defaulting to 1000 [ 962.232859][ T13] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 47077 - 0 [ 962.232893][ T13] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 49274 - 0 [ 962.261387][ T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 47077 - 0 [ 962.286921][ T13] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 49274 - 0 [ 962.444877][T27012] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7339'. [ 962.495470][T21031] wlan0 speed is unknown, defaulting to 1000 [ 962.511688][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.519745][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.555733][T21031] wlan0 speed is unknown, defaulting to 1000 [ 962.562593][T21031] syz1: Port: 1 Link ACTIVE [ 962.748986][T27016] netlink: 4460 bytes leftover after parsing attributes in process `syz.4.7339'. [ 963.516923][T27037] xt_TCPMSS: Only works on TCP SYN packets [ 963.578075][T27038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 963.603816][T27038] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 963.635229][T27027] wlan0 speed is unknown, defaulting to 1000 [ 963.648049][T27027] wg1 speed is unknown, defaulting to 1000 [ 963.663007][T13034] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 964.358215][T27060] netlink: 'syz.3.7351': attribute type 39 has an invalid length. [ 964.444231][T27060] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7351'. [ 964.455708][T27060] netlink: 43 bytes leftover after parsing attributes in process `syz.3.7351'. [ 964.474386][T27060] netlink: 'syz.3.7351': attribute type 5 has an invalid length. [ 964.528711][T27060] netlink: 43 bytes leftover after parsing attributes in process `syz.3.7351'. [ 964.543340][T13034] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 964.558081][T27064] vlan1: entered allmulticast mode [ 964.565031][T27064] bridge_slave_0: entered allmulticast mode [ 964.621839][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 964.777293][T27070] netlink: 'syz.0.7363': attribute type 6 has an invalid length. [ 964.806557][T27070] netlink: 'syz.0.7363': attribute type 6 has an invalid length. [ 965.782155][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 965.803134][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 966.008967][T27094] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 966.166961][T27096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 966.480561][T27105] netlink: 'syz.5.7366': attribute type 6 has an invalid length. [ 966.516625][T27105] netlink: 'syz.5.7366': attribute type 6 has an invalid length. [ 966.634674][T27110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 966.654888][T27110] 8021q: adding VLAN 0 to HW filter on device team0 [ 966.752680][T27110] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 966.861859][T13034] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 967.442185][T27108] wlan0 speed is unknown, defaulting to 1000 [ 967.533991][T27108] wg1 speed is unknown, defaulting to 1000 [ 967.991555][T27138] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7371'. [ 968.016830][T27120] wlan0 speed is unknown, defaulting to 1000 [ 968.056320][T27120] wg1 speed is unknown, defaulting to 1000 [ 968.585630][T27155] netlink: 'syz.0.7375': attribute type 2 has an invalid length. [ 968.766736][T27158] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7375'. [ 969.554141][T27150] wlan0 speed is unknown, defaulting to 1000 [ 969.755273][T27150] wg1 speed is unknown, defaulting to 1000 [ 970.025890][T21039] wlan0 speed is unknown, defaulting to 1000 [ 970.037381][T21039] syz1: Port: 1 Link DOWN [ 970.122052][T27177] netlink: 'syz.4.7379': attribute type 12 has an invalid length. [ 970.190073][T27175] netlink: 1 bytes leftover after parsing attributes in process `syz.5.7380'. [ 970.240398][T27177] netlink: 'syz.4.7379': attribute type 4 has an invalid length. [ 970.385273][T27181] netlink: 80 bytes leftover after parsing attributes in process `syz.5.7380'. [ 970.432516][T27183] pimreg: left allmulticast mode [ 970.434799][T27181] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 970.449867][T27181] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 970.521071][T27185] rdma_rxe: rxe_newlink: failed to add lo [ 971.045924][T27197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7385'. [ 971.158654][T27180] wlan0 speed is unknown, defaulting to 1000 [ 971.178967][T27180] wg1 speed is unknown, defaulting to 1000 [ 971.884707][T27218] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7387'. [ 973.071654][T27233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7393'. [ 973.196446][T27239] netlink: 'syz.4.7392': attribute type 33 has an invalid length. [ 973.204510][T27239] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7392'. [ 973.392393][T27225] wlan0 speed is unknown, defaulting to 1000 [ 973.400274][T27225] wg1 speed is unknown, defaulting to 1000 [ 973.584240][T27243] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 973.592587][T27243] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 973.600640][T27243] tipc: Resetting bearer [ 973.854190][T27243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7395'. [ 973.892730][T27243] macvtap0: entered promiscuous mode [ 973.898247][T27243] macvtap0: entered allmulticast mode [ 973.951806][T27249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7395'. [ 973.960836][T27243] bond0: entered allmulticast mode [ 973.982878][T27243] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 974.003453][T27249] bond0: left allmulticast mode [ 974.457566][T27239] wlan0 speed is unknown, defaulting to 1000 [ 974.485532][T27239] wg1 speed is unknown, defaulting to 1000 [ 974.904379][T27269] netlink: 'syz.1.7398': attribute type 16 has an invalid length. [ 974.922276][T27269] netlink: 'syz.1.7398': attribute type 17 has an invalid length. [ 975.014580][T27271] IPv6: NLM_F_REPLACE set, but no existing node found! [ 975.050064][T27269] tipc: Resetting bearer [ 975.098457][T27268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7398'. [ 975.159750][T27230] Can't find ip_set type hash:n [ 975.340901][T27274] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 975.369744][T27274] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 975.390764][T27274] tipc: Resetting bearer [ 975.414694][T27276] xt_TCPMSS: Only works on TCP SYN packets [ 975.494001][T27276] syzkaller0: entered promiscuous mode [ 975.499524][T27276] syzkaller0: entered allmulticast mode [ 975.563451][T27276] tipc: Enabling of bearer rejected, failed to enable media [ 975.759862][T27281] netlink: 596 bytes leftover after parsing attributes in process `syz.5.7402'. [ 975.966348][T27285] syz_tun: entered allmulticast mode [ 976.085115][T27288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7405'. [ 976.464582][T27285] wlan0 speed is unknown, defaulting to 1000 [ 976.473080][T27285] wg1 speed is unknown, defaulting to 1000 [ 976.679943][T27296] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7407'. [ 976.823048][T27283] syz_tun: left allmulticast mode [ 976.970154][T27296] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7407'. [ 976.999492][T27296] netlink: 34 bytes leftover after parsing attributes in process `syz.1.7407'. [ 977.835595][T27307] wlan0 speed is unknown, defaulting to 1000 [ 977.853846][T27307] wg1 speed is unknown, defaulting to 1000 [ 977.982352][T27312] tipc: Resetting bearer [ 978.063030][T27312] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 978.071354][T27312] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 978.089616][T27312] vlan1: left promiscuous mode [ 978.102479][T27312] macvtap0: left promiscuous mode [ 978.123086][T27315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7413'. [ 978.132792][T27312] macvtap0: left allmulticast mode [ 978.266005][T27322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7413'. [ 978.295549][T27188] Set syz1 is full, maxelem 65536 reached [ 978.324334][T27315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7413'. [ 978.478087][T27325] syzkaller0: entered promiscuous mode [ 978.545714][T27325] syzkaller0: entered allmulticast mode [ 978.554864][T27329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7415'. [ 978.751635][T27335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7416'. [ 978.806510][T27323] wlan0 speed is unknown, defaulting to 1000 [ 978.817286][T27323] wg1 speed is unknown, defaulting to 1000 [ 979.369769][T27348] block nbd0: Unsupported socket: should be TCP or UNIX. [ 979.830295][T27368] netlink: 'syz.1.7420': attribute type 12 has an invalid length. [ 979.874587][T27368] netlink: 'syz.1.7420': attribute type 4 has an invalid length. [ 979.893911][T27363] rdma_rxe: rxe_newlink: failed to add lo [ 980.172078][T27365] wlan0 speed is unknown, defaulting to 1000 [ 980.180342][T27365] wg1 speed is unknown, defaulting to 1000 [ 980.643462][T27392] netlink: 'syz.0.7425': attribute type 1 has an invalid length. [ 980.686981][T27398] bond1: (slave bond2): Releasing backup interface [ 980.703734][T27398] bond4: (slave veth15): Releasing active interface [ 980.894207][T27398] bond9: (slave gretap2): Releasing active interface [ 980.962446][T27398] bond10: (slave vcan0): Releasing backup interface [ 980.969305][T27398] bond10: (slave vcan1): making interface the new active one [ 981.026835][T27404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7428'. [ 981.051503][T27398] bond10: (slave vcan1): Releasing backup interface [ 981.060397][T27398] veth21: left allmulticast mode [ 981.065490][T27398] veth21: left promiscuous mode [ 981.070820][T27398] bridge11: port 1(veth21) entered disabled state [ 981.082620][T27398] vlan0: left allmulticast mode [ 981.087534][T27398] veth1: left allmulticast mode [ 981.093290][T27398] vlan0: left promiscuous mode [ 981.098102][T27398] veth1: left promiscuous mode [ 981.104859][T27398] bridge11: port 3(vlan0) entered disabled state [ 981.117262][T27398] bond11: (slave geneve3): Releasing active interface [ 981.399281][T27408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7429'. [ 981.560231][T27393] wlan0 speed is unknown, defaulting to 1000 [ 981.579604][T27393] wg1 speed is unknown, defaulting to 1000 [ 981.653732][T27418] lo: entered promiscuous mode [ 981.690354][T27418] tunl0: entered promiscuous mode [ 981.729495][T27418] gre0: entered promiscuous mode [ 981.746326][T27418] gretap0: entered promiscuous mode [ 981.759430][T27418] erspan0: entered promiscuous mode [ 981.784787][T27422] netlink: 'syz.3.7432': attribute type 13 has an invalid length. [ 981.795693][T27422] netlink: 'syz.3.7432': attribute type 17 has an invalid length. [ 981.808084][T27418] ip_vti0: entered promiscuous mode [ 981.816398][T27418] ip6_vti0: entered promiscuous mode [ 981.825172][T27418] sit0: entered promiscuous mode [ 981.844279][T27418] ip6tnl0: entered promiscuous mode [ 981.851911][T27418] ip6gre0: entered promiscuous mode [ 981.858802][T27418] ip6gretap0: entered promiscuous mode [ 981.872207][T27418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 981.880752][T27418] team0: entered promiscuous mode [ 981.887755][T27418] 8021q: adding VLAN 0 to HW filter on device team0 [ 981.896119][T27418] nlmon0: entered promiscuous mode [ 981.903512][T27418] caif0: entered promiscuous mode [ 981.908818][T27418] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 981.998788][T27422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.012315][T27422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 982.085752][ T79] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 982.348300][T27432] netlink: 'syz.0.7435': attribute type 6 has an invalid length. [ 982.360579][T27432] netlink: 'syz.0.7435': attribute type 6 has an invalid length. [ 982.608567][T27440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.621989][T27440] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.702422][T27440] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 983.442963][T27438] delete_channel: no stack [ 983.525815][T27466] pim6reg1: entered promiscuous mode [ 983.551063][T27466] pim6reg1: entered allmulticast mode [ 983.876221][T27443] wlan0 speed is unknown, defaulting to 1000 [ 983.903299][T27443] wg1 speed is unknown, defaulting to 1000 [ 983.946774][T27465] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7440'. [ 984.146229][T27482] tipc: Resetting bearer [ 984.160256][T27482] syzkaller0: left promiscuous mode [ 984.165954][T27482] syzkaller0: left allmulticast mode [ 984.193776][T27485] netlink: 'syz.5.7444': attribute type 6 has an invalid length. [ 984.209373][T27485] netlink: 'syz.5.7444': attribute type 6 has an invalid length. [ 984.428807][T27487] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7445'. [ 984.914277][T27489] wlan0 speed is unknown, defaulting to 1000 [ 984.930652][T27489] wg1 speed is unknown, defaulting to 1000 [ 985.093277][T27500] xt_cgroup: invalid path, errno=-2 [ 985.141126][T27500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7450'. [ 985.271803][T27500] 8021q: adding VLAN 0 to HW filter on device bond15 [ 985.376157][T27509] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7452'. [ 985.821720][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 985.879120][T27518] netlink: 'syz.4.7454': attribute type 11 has an invalid length. [ 985.902887][T27518] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7454'. [ 986.018200][T27526] netlink: 'syz.0.7456': attribute type 6 has an invalid length. [ 986.027100][T27526] netlink: 'syz.0.7456': attribute type 6 has an invalid length. [ 986.235017][T27540] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7458'. [ 986.251690][T27540] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7458'. [ 986.270757][T27540] netlink: 'syz.3.7458': attribute type 4 has an invalid length. [ 986.335364][T27542] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7458'. [ 986.492982][T27546] dvmrp0: entered allmulticast mode [ 986.500803][T27544] tipc: Enabling of bearer rejected, already enabled [ 986.526377][T27548] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7462'. [ 987.047463][T27562] bond15: left promiscuous mode [ 987.442208][T27571] wlan0 speed is unknown, defaulting to 1000 [ 987.456899][T27571] wg1 speed is unknown, defaulting to 1000 [ 987.485957][T27574] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7468'. [ 988.181044][T27589] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 988.205407][T27587] tipc: Enabling of bearer rejected, already enabled [ 989.012740][T27619] __nla_validate_parse: 1 callbacks suppressed [ 989.012761][T27619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7478'. [ 990.624701][T27641] macvtap2: entered promiscuous mode [ 991.420602][T27665] netlink: 'syz.3.7490': attribute type 1 has an invalid length. [ 991.453101][T27665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7490'. [ 991.884629][T27669] netlink: 'syz.3.7491': attribute type 33 has an invalid length. [ 991.911506][T27669] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7491'. [ 992.574921][T27689] netlink: 'syz.5.7497': attribute type 6 has an invalid length. [ 992.596639][T27689] netlink: 'syz.5.7497': attribute type 6 has an invalid length. [ 992.613560][T27676] wlan0 speed is unknown, defaulting to 1000 [ 992.765951][T27676] wg1 speed is unknown, defaulting to 1000 [ 993.066179][T27700] netlink: 'syz.1.7499': attribute type 16 has an invalid length. [ 993.104291][T27700] netlink: 'syz.1.7499': attribute type 17 has an invalid length. [ 993.242620][T27669] wlan0 speed is unknown, defaulting to 1000 [ 993.267957][T27669] wg1 speed is unknown, defaulting to 1000 [ 993.413192][T27714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 993.422080][T27714] 8021q: adding VLAN 0 to HW filter on device ` [ 993.449293][T27714] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 994.421773][T27719] wlan0 speed is unknown, defaulting to 1000 [ 994.613954][T27719] wg1 speed is unknown, defaulting to 1000 [ 996.141113][T27768] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7516'. [ 996.185810][T27768] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 996.193255][T27768] IPv6: NLM_F_CREATE should be set when creating new route [ 996.213474][T27768] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 996.220783][T27768] IPv6: NLM_F_CREATE should be set when creating new route [ 996.314296][T27771] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7515'. [ 996.351499][T27764] wlan0 speed is unknown, defaulting to 1000 [ 996.353198][ T5846] Bluetooth: hci1: link tx timeout [ 996.359910][T27764] wg1 speed is unknown, defaulting to 1000 [ 996.366112][ T5846] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 996.379297][ T5846] Bluetooth: hci1: link tx timeout [ 996.384690][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 996.815122][T27779] tipc: Enabling of bearer rejected, already enabled [ 997.158319][T27785] netlink: 'syz.1.7519': attribute type 4 has an invalid length. [ 997.182205][T27781] syzkaller0: entered promiscuous mode [ 997.187734][T27781] syzkaller0: entered allmulticast mode [ 997.645787][T27793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7522'. [ 997.837408][T27797] tipc: Started in network mode [ 997.843609][T27797] tipc: Node identity , cluster identity 4711 [ 997.850379][T27797] tipc: Failed to obtain node identity [ 997.859653][T27797] tipc: Enabling of bearer rejected, failed to enable media [ 997.960394][T27797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7520'. [ 998.000770][T27797] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7520'. [ 998.054017][T27797] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7520'. [ 998.461729][T27772] Bluetooth: hci1: command 0x0405 tx timeout [ 998.508621][ T5846] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 998.520579][ T5846] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 998.529022][ T5846] CPU: 1 UID: 0 PID: 5846 Comm: kworker/u9:9 Not tainted syzkaller #0 PREEMPT(full) [ 998.538521][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 998.548607][ T5846] Workqueue: hci1 hci_cmd_sync_work [ 998.553839][ T5846] RIP: 0010:klist_remove+0x14a/0x340 [ 998.559152][ T5846] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 49 cc e8 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 2a cc e8 f6 49 8b 44 24 58 48 89 44 24 08 [ 998.578781][ T5846] RSP: 0018:ffffc900049cf6a0 EFLAGS: 00010202 [ 998.584872][ T5846] RAX: 000000000000000b RBX: ffff88802ef01e40 RCX: 0000000000000000 [ 998.592871][ T5846] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 998.600845][ T5846] RBP: ffffc900049cf7a0 R08: ffffffff8f638643 R09: 1ffffffff1ec70c8 [ 998.608860][ T5846] R10: dffffc0000000000 R11: fffffbfff1ec70c9 R12: 0000000000000000 [ 998.616860][ T5846] R13: 1ffff1100acb428c R14: ffff8880565a1460 R15: dffffc0000000000 [ 998.624849][ T5846] FS: 0000000000000000(0000) GS:ffff88812623d000(0000) knlGS:0000000000000000 [ 998.633792][ T5846] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 998.640408][ T5846] CR2: 00007efdd35d5d58 CR3: 000000007edba000 CR4: 00000000003526f0 [ 998.648431][ T5846] Call Trace: [ 998.651726][ T5846] [ 998.654672][ T5846] ? __pfx_klist_remove+0x10/0x10 [ 998.659717][ T5846] ? __pfx_kobject_move+0x10/0x10 [ 998.664756][ T5846] ? do_raw_spin_unlock+0x122/0x240 [ 998.669978][ T5846] ? get_device_parent+0x366/0x3a0 [ 998.675135][ T5846] device_move+0x193/0x700 [ 998.679565][ T5846] hci_conn_del_sysfs+0xb8/0x170 [ 998.684510][ T5846] hci_conn_del+0xc33/0x11b0 [ 998.689122][ T5846] ? hci_abort_conn_sync+0x24e/0xe30 [ 998.694426][ T5846] hci_abort_conn_sync+0x658/0xe30 [ 998.699560][ T5846] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 998.705214][ T5846] ? hci_conn_valid+0x21/0x230 [ 998.710006][ T5846] ? hci_conn_valid+0x21/0x230 [ 998.714778][ T5846] ? hci_conn_valid+0x21/0x230 [ 998.719550][ T5846] ? hci_conn_valid+0x211/0x230 [ 998.724410][ T5846] ? __pfx_abort_conn_sync+0x10/0x10 [ 998.729725][ T5846] hci_cmd_sync_work+0x213/0x3a0 [ 998.734697][ T5846] ? process_scheduled_works+0x9ef/0x17b0 [ 998.740443][ T5846] process_scheduled_works+0xae1/0x17b0 [ 998.746017][ T5846] ? __pfx_process_scheduled_works+0x10/0x10 [ 998.752026][ T5846] worker_thread+0x8a0/0xda0 [ 998.756630][ T5846] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 998.762997][ T5846] ? __kthread_parkme+0x7b/0x200 [ 998.767954][ T5846] kthread+0x711/0x8a0 [ 998.772042][ T5846] ? __pfx_worker_thread+0x10/0x10 [ 998.777168][ T5846] ? __pfx_kthread+0x10/0x10 [ 998.781769][ T5846] ? _raw_spin_unlock_irq+0x23/0x50 [ 998.787001][ T5846] ? lockdep_hardirqs_on+0x9c/0x150 [ 998.792209][ T5846] ? __pfx_kthread+0x10/0x10 [ 998.796898][ T5846] ret_from_fork+0x4bc/0x870 [ 998.801514][ T5846] ? __pfx_ret_from_fork+0x10/0x10 [ 998.806844][ T5846] ? __switch_to_asm+0x39/0x70 [ 998.811622][ T5846] ? __switch_to_asm+0x33/0x70 [ 998.816394][ T5846] ? __pfx_kthread+0x10/0x10 [ 998.821004][ T5846] ret_from_fork_asm+0x1a/0x30 [ 998.825785][ T5846] [ 998.828815][ T5846] Modules linked in: [ 998.833528][ T5846] ---[ end trace 0000000000000000 ]--- [ 998.839849][ T5846] RIP: 0010:klist_remove+0x14a/0x340 [ 998.847055][ T5846] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 49 cc e8 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 2a cc e8 f6 49 8b 44 24 58 48 89 44 24 08 [ 998.866956][ T5846] RSP: 0018:ffffc900049cf6a0 EFLAGS: 00010202 [ 998.873860][ T5846] RAX: 000000000000000b RBX: ffff88802ef01e40 RCX: 0000000000000000 [ 998.882007][ T5846] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 998.890012][ T5846] RBP: ffffc900049cf7a0 R08: ffffffff8f638643 R09: 1ffffffff1ec70c8 [ 998.898149][ T5846] R10: dffffc0000000000 R11: fffffbfff1ec70c9 R12: 0000000000000000 [ 998.906396][ T5846] R13: 1ffff1100acb428c R14: ffff8880565a1460 R15: dffffc0000000000 [ 998.914451][ T5846] FS: 0000000000000000(0000) GS:ffff88812623d000(0000) knlGS:0000000000000000 [ 998.923554][ T5846] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 998.930173][ T5846] CR2: 00007efdd35d5d58 CR3: 000000007edba000 CR4: 00000000003526f0 [ 998.938295][ T5846] Kernel panic - not syncing: Fatal exception [ 998.944666][ T5846] Kernel Offset: disabled [ 998.948998][ T5846] Rebooting in 86400 seconds..