last executing test programs: 2m29.377725302s ago: executing program 32 (id=19566): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) shutdown(0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m27.735157577s ago: executing program 33 (id=19574): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r5, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000013c0)={@map=r3, 0xffffffffffffffff, 0x17, 0x1, r4, @void, @value=r4, @void, @void, r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r2, 0x34, 0x0, @val=@tcx={@void, @value=r7, @void, @void, r6}}, 0x1c) 2m11.3875481s ago: executing program 34 (id=19664): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket(0x8, 0x0, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001280)={0x6c, r1, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x43, 0xe, {{{0x0, 0x2}, {}, @device_a, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1}, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x6c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48002) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) 2m6.388048385s ago: executing program 35 (id=19678): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000200)={0x0, 0x0, "c34c4b9839d6b4e279a336ba49fc162a"}) unshare(0x6a040000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001c000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000004000000632af8ff00000000b509010000000000c3aaf8ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$rxrpc(0x21, 0x2, 0x2) bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r3 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r3, 0x40106183, &(0x7f0000000000)) 2m0.891916693s ago: executing program 36 (id=19699): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xe4, 0x30, 0xffff, 0x0, 0x0, {}, [{0xd0, 0x1, [@m_ife={0xcc, 0x1, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x30, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7fff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_PRIO={0x8, 0x3, @val=0x201}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x40}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x80, 0x3, 0x0, 0xd}}}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}]}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x6}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x2000000e, 0x8, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe4}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@remote, 0x4e20, 0x0, 0x4e22, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x200000000002f1b, 0xfffffffffffffffe, 0x0, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in6=@empty, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 1m48.647005691s ago: executing program 37 (id=19758): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)='\r', 0x1}], 0x1, 0x0, 0x0, 0x88010}], 0x1, 0x20000010) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1m43.619636338s ago: executing program 38 (id=19779): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket(0x2b, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x600}, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 1m27.142159454s ago: executing program 39 (id=19841): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = socket(0x2b, 0x80801, 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20000000) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000100)=0xffff8000, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x200408c0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) 1m27.080106544s ago: executing program 40 (id=19840): unshare(0x6a040000) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xd}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000005c0)={0x0, 0x9, 0x1, [0x0]}, &(0x7f0000000600)=0xa) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000000)={0x7, 'vcan0\x00', {0x101}, 0x1000}) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, @loopback, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x3, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x4007}}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000740)=0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a0, 0x390, 0x0, 0x490, 0x1a0, 0xd0, 0x638, 0x638, 0x638, 0x638, 0x638, 0x6, 0x0, {[{{@ipv6={@private0, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xffffff00], [0xffffff00, 0xff000000, 0xffffff00, 0xff], 'erspan0\x00', 'syzkaller1\x00', {}, {}, 0x0, 0x3, 0x7, 0xc}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'erspan0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x33}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x0, 0x11}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@ipv6={@local, @mcast1, [], [], 'lo\x00', 'vlan1\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x2f, 0x7f, 0x3, 0x6b, 0x8, @private1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0x0, 0xffffff00, 0xffffff], [0xff000000, 0x0, 0xffffff00, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 0x880, 0x200}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0xc}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0xe8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x7, {0x100000000}}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@inet=@udplite={{0x30}, {[0x4e21, 0x7], [0x4e21, 0x4e23]}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3fd2381d6b6cc2b35d0e5e1881ad182c192374cca11a526792ffce56f39c"}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xc914, 0x2, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 1m14.106604952s ago: executing program 41 (id=19891): socketpair(0x1e, 0x80005, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000300), 0x0, 0x4000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r3, 0xc7, 0x1}, 0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x8, 0x9a2f, 0x20c, 0x0, 0x80000001, 0x5, 0x3, 0x10, r3}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7000000010008105001100"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) 1m1.873069094s ago: executing program 42 (id=19938): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$packet(0x11, 0x2, 0x300) sendmsg(0xffffffffffffffff, 0x0, 0x844) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) getsockname$packet(r1, 0x0, 0x0) connect$rose(r1, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 58.433349459s ago: executing program 3 (id=20037): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x40, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_create1(0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00'], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80a00, 0x0) socket$igmp6(0xa, 0x3, 0x2) write(r0, &(0x7f0000000000)="05000000010001", 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a03000000000000000000010000000900030073797a32000000000900010073797a30000000004c000000060a01040000000000000000010000052400048020000180080001006e617400140002800800054000000017080001400000000408000b4000000000090001007379"], 0xc0}}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000340)="07000000010000", 0x7) 58.302537944s ago: executing program 3 (id=20038): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x66, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004804) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, 0x0) ioctl$sock_netdev_private(r0, 0x89f2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) listen(r1, 0x1ad72f7) accept4(r1, 0x0, 0x0, 0x80000) r3 = accept4$netrom(r1, 0x0, 0x0, 0x80000) writev(r3, &(0x7f00000001c0), 0x7) 57.450414916s ago: executing program 3 (id=20044): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000000206010100000000000000000700000912000300686173683a6e65742c706f72740000000900020073797a30000000000500010007000000090002000000000900020073797a30000000004486125c3abc91eb7881fa66678f60aebe7d13e2986f20cd8093c2da0d1e2c95ec9fffaecdce0d8363b2245bcf8688864bfb8d78c001bf343e166ce621a4a2256a6a55ea22c7067f7ea3f84bd12703e2efdb7edba552b6156c361628fb3ab481"], 0x54}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) r1 = socket(0x2, 0x803, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0xf0ff) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000340)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000180)}}], 0x2, 0x40) 56.82034564s ago: executing program 3 (id=20046): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x894a, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000300)={0x0, 0x12b, 0x401, 0x7, 0x6, 0xfff1, 0x0, 0x8001, {0x0, @in6={{0xa, 0x4e24, 0x40000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400}}, 0x7, 0xffff8000, 0x1000, 0x2, 0x7}}, &(0x7f0000000200)=0xb0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fedbdf2539"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40800) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r3) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x44, r5, 0x202, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8000}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8840) 55.831657068s ago: executing program 3 (id=20048): socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) 53.551561268s ago: executing program 43 (id=19980): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) 50.822150604s ago: executing program 3 (id=20061): socket$netlink(0x10, 0x3, 0x0) unshare(0x62040400) unshare(0x44000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, 0x0, 0x2000c090) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x55, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x8001, 0x52, &(0x7f00000004c0)=""/82, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x8, 0xc, 0x12}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r4}, &(0x7f00000000c0), &(0x7f00000006c0)=r5}, 0x20) r6 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 48.971034965s ago: executing program 4 (id=20069): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb88}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) close(r4) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0x0, 0xb}, {0xc, 0x7}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 48.255113015s ago: executing program 4 (id=20070): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x300, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x20040010) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="610304087b02040912c90e2fba6bad80f032148548fcee0e28fdc801"], 0x1c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000c500000000000000008500000041000000850000000500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) close(0x3) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB="01400010000600000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f65"], 0x78}, 0x1, 0xffffffff00000003}, 0x4) 48.019719256s ago: executing program 4 (id=20071): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x400005, 0x2, 0x3, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 47.773606555s ago: executing program 4 (id=20073): socket$nl_route(0x10, 0x3, 0x0) r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180)) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000200)=0x5, 0x4) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x3, 'nq\x00', 0x1, 0x4, 0x8}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x1, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 47.671155453s ago: executing program 4 (id=20075): r0 = socket$netlink(0x10, 0x3, 0x15) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x12) r1 = socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x401, 0x7, 0x10000003, 0x1000000004, 0x100000001]}, &(0x7f0000000080)=0x25) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000780), &(0x7f00000007c0)=0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) pipe(&(0x7f0000000740)) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000140)={0x0, 0xe61, 0x81, 0x1}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000540)={r3, 0x8, 0xfffffffffffff32c, 0x1}) sendmsg$netlink(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYRES64=r0], 0xe0}], 0x1}, 0x0) 47.456529926s ago: executing program 4 (id=20077): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) unshare(0x62040200) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) 46.58487445s ago: executing program 44 (id=20024): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x6) accept4(r0, 0x0, 0x0, 0x80800) shutdown(r0, 0x0) r1 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1}, 0x48) r2 = socket(0x8, 0x0, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="0d4201f3951384", 0x7}], 0x1}}], 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x618e, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x2, 0x3, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x1f}}, @NFQA_CFG_CMD={0x8, 0x1, {0x5, 0x0, 0x3}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x18}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x27}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44005}, 0x8000) 42.989313023s ago: executing program 1 (id=20087): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) unshare(0x62040200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d04a0f1d0d47b2", 0x10) r5 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, r5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401}) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)='\x00'/10, 0xa}], 0x3) sendmmsg$inet6(r5, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="dacd5189a3831e198991e875a5b0e2a0631aadffd82be4a44a532a5c78916a94945addab2ba680d45927b0ed8f9b9c9addff71fbc1052f219d7d30a17c4ec05172dad26489", 0x45}], 0x1}}], 0x1, 0x4000040) 42.413792599s ago: executing program 1 (id=20088): socket$inet6(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @local}, &(0x7f0000000240)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000380)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a80100001b00000228bd7000fddbdf25ac1e01010000000000000000", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="08000000000000000100000000000000ff7f000000000000040000000000000008000000000000000400000000000000050000000000000007000000000000000300000000000000ffffffffffffff7f0700000000000000070000000000000005000000b96b6e0001000103000000000600000000000000e8001100fc01000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001000000000000000000000000000000001e0100000235000002000a00fc02e70000000000000000000000000120010000000000000000000000000000ff010000000000000000000000000001fc010000000000000000000000000001ff040000053500000a000a00fc010000000000000000000000000000ff020000000000000000000000000001e000000200000015000000000000000000ff0100000000000004"], 0x1a8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x40804) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x41) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc00"/28], 0xb8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040", @ANYRES32=0x0], 0xb8}}, 0x4000) 42.337758284s ago: executing program 1 (id=20089): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003a00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80001, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket(0x10, 0x803, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 42.252857533s ago: executing program 1 (id=20090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="2e000400010002", 0x7) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_BROADCAST={0xa}, @IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x50}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 41.564517565s ago: executing program 1 (id=20096): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 41.169644872s ago: executing program 1 (id=20098): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) 35.545337267s ago: executing program 45 (id=20061): socket$netlink(0x10, 0x3, 0x0) unshare(0x62040400) unshare(0x44000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, 0x0, 0x2000c090) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x55, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x8001, 0x52, &(0x7f00000004c0)=""/82, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x8, 0xc, 0x12}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r4}, &(0x7f00000000c0), &(0x7f00000006c0)=r5}, 0x20) r6 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 33.998185887s ago: executing program 7 (id=20118): socket$kcm(0x2d, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x82) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000140)={0x7, &(0x7f0000000580)=[{@none}, {@none}, {}, {@fixed}, {@fixed}, {}, {}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa000000000400000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) 33.315698782s ago: executing program 7 (id=20121): r0 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0), 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r9, 0x4) 33.245779791s ago: executing program 7 (id=20122): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x100b) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x220c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x7) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r7, 0x2) listen(r6, 0x7f) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) read(r8, &(0x7f0000000340)=""/209, 0xd1) 33.078816987s ago: executing program 7 (id=20124): socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20000081}, 0x4) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) shutdown(r0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000000d00)=[{{0x0, 0x1e, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0xfffffd57}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2, 0x0, 0xffffff84}}], 0x5f, 0x4000000) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 32.964908681s ago: executing program 7 (id=20126): socket(0x2, 0x80805, 0x0) socket$packet(0x11, 0xa, 0x300) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af3650400410038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, @in6=@empty, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000000c0)={0x5a13, 0x2, 0x2, 0x6, 0x1fd}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be0044112f"], 0xfdef) 32.587369718s ago: executing program 7 (id=20129): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44001}, 0x4080) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) close(0x4) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) socket$packet(0x11, 0x3, 0x300) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f0000000f40)="82f5252be7dc93dfe06dd6116412c42be1ca316c088207d2a48756b23f3a13074aa35c301d591f03061d8fe0f70f307034cd539cfff48644efbc", 0x3a}], 0x2}}], 0x1, 0x4048894) 32.055033498s ago: executing program 46 (id=20077): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) unshare(0x62040200) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) 30.470248784s ago: executing program 5 (id=20135): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000380)=ANY=[@ANYRES32=r0]) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8dfec6af2ae8080b56c53c12b8431d17955ae1ec78709eee9acf825fdb672651f7eafb44b576930aff4b6a86ced3e4392cfe57a2c11b97e93f38debd6dc69f3a50d5742daa7081df08bd8118dcd6d9d18830c7d79d8", 0x6c}, {&(0x7f0000000240)="23ade41881a1e7ca07379924e2cb441681815fa433e953138ec1eb6c7f56119ff985", 0x22}, {&(0x7f0000000140)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a23", 0x34}, {&(0x7f0000000280)="1b1eb47967b88f89e960c59413baaf1384ad9c758abf845c5714a919ca02735c5514fa78f9f084d72227c1d3f6607ce5a2183a169535d0b2bb594ecb92b8df361bca805ac5595a389d39a58a35c0", 0x4e}], 0x4, 0x0, 0x0, 0x40880}], 0x1, 0x4814) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)}, 0xffffff0b}], 0x2, 0x2001, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, 0x0, 0x40890) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000280)={{0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x2000, 0xc24, 0x9, 0xfffffff9}}, 0x44) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000080)='bond_slave_1\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x3}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) 29.531087713s ago: executing program 5 (id=20136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_INFO={0x6, 0x3, "02b5"}, @NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = epoll_create(0x752) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000002c0), 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="6c00000002060101000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3100000000200007800500030017d400000c0001800800014000000000080006400000000405000500020000000500010006"], 0x6c}}, 0x40000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xf, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7b62, 0x0, 0x0, 0x0, 0x7d1}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x4}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @alu={0x4, 0x1, 0x5, 0x3, 0x9, 0x2}, @exit]}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000480)=[{0x5, 0x3, 0x3, 0xe}, {0x0, 0x5, 0x6, 0x5}, {0x3, 0x5, 0x8, 0x4}], 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000000c0)='rpcb_unregister\x00', r7, 0x0, 0x4}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x32, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x13, 0x1, {{0x0, 0x0, 0x0, 0x12000000, 0x6}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmmsg$inet(r1, &(0x7f0000000d80)=[{{&(0x7f0000000640)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000940)=[{0x0}, {0x0}, {&(0x7f0000000800)="1d80bb7932685d561bf5b090eea141b770312c128c785175e1b5f8e01eabb2be17684ed31762c99705d96eebc71160b1ea4aee10bfa79e8276b78885ff522870e55cc0a5e43c2e8153b11826dfe6c9553b4f86e68d778133bc2cf269bfa47e939476a1bc0d352111b2b17f19a1fb641b70763bfd6ee535075d8e95a5b9e7c7eece7cecf9051feb6c7d606de3e4c0dc0da6e476eeffaf3d2278a43ac6e85f730d44115e6dfb6995e7a4fb17650819e5284100707dce05d9253574a753a5e5f147c85a6506bf8186e457f814385904ef1f04863ced90e60bbc5ecb97e0c09d3ab0511da4b314d1ac04b2ffe405a0a6b98a41fc0c98e3bc64e4a1", 0xf9}, {&(0x7f0000000900)="05f4d643d0a0a0ab972b79376836bfcd332c7b832f13283e027113b60f118e55717b724417bf7e3bba340a27a034bc286739", 0x32}], 0x4, &(0x7f0000000980)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x100}}, @ip_retopts={{0x60, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0x64, 0x0, 0x3, [0x25d1, 0xfff, 0x3ff, 0x2, 0x6, 0x9, 0x9]}, @timestamp={0x44, 0x8, 0xf0, 0x0, 0xb, [0x3]}, @ra={0x94, 0x4}, @generic={0x83, 0x7, "0e1d1ed5b5"}, @timestamp={0x44, 0x18, 0xa5, 0x0, 0x7, [0x9, 0x2fc, 0x800, 0x7, 0xff]}, @noop, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x200}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0xd8}}, {{&(0x7f0000000a80)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000b40)="f1738bdca8333c390483e6a239b6fcd91b99622ef7ddc409e5a74a29e59f556463840e7e08c4611c264057d0d8441873f8809a3ebb519906f81bacf4bcd8e94d5595dce3a558630795186229c219de58d6525531a5ffa54f0c95f1b28a0e59b3aec3fe5bf821428b9a13a7521dba1a0fe8f6708a8a789e7180998a6b9b23", 0x7e}, {&(0x7f0000000bc0)="d5dde0cc9b5c92", 0x7}, {&(0x7f0000000c00)="b40d8030a0a5d6129a3777371f3d37c8dbab9303e68e892e27d19c444e66efa3e10701c9404871a6a189f3594d5708ff3026c7a2f50a", 0x36}, {&(0x7f0000000c40)="79b421a73e891defca19a22635d3225269", 0x11}], 0x4, &(0x7f0000000cc0)=[@ip_retopts={{0x38, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0xac, 0x1, 0xc, [{@local, 0x2}, {@multicast2}, {@broadcast, 0x4}, {@multicast2, 0x75b}]}, @end, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_retopts={{0x30, 0x0, 0x7, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x1b, 0x64, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @local, @loopback]}]}}}, @ip_tos_u8={{0x11}}], 0x98}}], 0x2, 0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x1, @mcast1, 0x400}]}, &(0x7f0000000080)=0x10) 29.383168094s ago: executing program 5 (id=20137): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x3, 0xc, 0x2, 0x0, @multicast}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000580)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) close(r2) epoll_create1(0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x4040006}, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r4, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'broadcast-link\x00'}}}, 0x28}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000007c0)="93bffce623851797a8dc7901f0048278cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee389a3427c84262ff67b679ccac105b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f84240270a470f95b99ebc70000000000000000000000000000000002000002000000b91676caca13a5430463ccd3c6bdddacbcd34ec7f4c95078d0e9c390731b689cb03fe9d7a23fc6b358fa882b73f7bba72a12678806a5c63f91457070bd1985ddf9", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="51e657b8220ca193c9de9030c3c7175ae0132383bf66bd1ea5bd07a8092f5c1c356ef81ebc8a3ed11284c75e4991ca84a0eda6ac4148ace258f78bc2340c45834bc28c93523f00c13f7bda920d040647a60c2f548c6d155657", 0x59}, {&(0x7f00000002c0)="ee3714aa7756572d12ad3cd80207f0ea76a0bc3c9248ca350afa19d6fbf95238e23db454a07c93a0831e31bdca1de56a48b55c0e56450721a31ba40ea9fb151d57852e371a2ace8bf18e4f347744d20282453e4d54f49b050ae57bc7515d2c546523d307712455c5a01a19915dceb94ccf3e2abdaf29911893b524ea0d6c", 0x7e}, {&(0x7f0000000340)="369a15a0571263d7eb045c4189eca46d74304653c6a7cdcc3156527537a7ac0e069d681daf747f096a98d3c2cfe43d76014e5e77acaa68492279aea8751e5b0c555309b4609ddfd17912d5f9f49e2d85356e13b3e9c95b0b0b9b13dd80b34f03d37201b9", 0x64}], 0x3}}], 0x2, 0x48d0) 29.265596351s ago: executing program 5 (id=20138): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x4, 0x3, 0x8b, 0x9, 0x1, 0x9, 0x7f, 0x1, 0x10, 0x4f, 0x2, 0x9, 0x5, 0x5}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="7a0a00ff00000000711078000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x24, r3, 0x6a513da061e1002b, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x9, 0xfa, 0x0, 0x4, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_x_sec_ctx={0x1, 0x18, 0x7, 0xff}, @sadb_x_nat_t_type={0x1, 0x14, 0x57}]}, 0x20}}, 0x24000800) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs={0x1, 0x0, 0xffffffff}, 0x6e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x6, 0x0, 0x1, 0x7}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r6, 0x8b32, &(0x7f0000000040)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x77, r8, 0x100, 0x0, 0x0, {{0x7e}, {@val={0x0, 0x3, r5}, @val={0xc, 0x99, {0xfffffff7, 0x65}}}}}, 0x20}}, 0x4000054) 29.05224829s ago: executing program 5 (id=20139): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r1, 0x0) mmap(&(0x7f00003e4000/0x3000)=nil, 0x3000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x8, 0x4, 0x2, 0x1800}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) socket$l2tp(0x2, 0x2, 0x73) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x24040800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 28.225501335s ago: executing program 5 (id=20140): unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000001040)=0x2a9, 0x4) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x83dff000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 26.285209883s ago: executing program 9 (id=20145): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) accept4$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x2711}, 0x10, 0x80000) shutdown(r1, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x107c80, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/12, 0xc) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 25.970229184s ago: executing program 47 (id=20098): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) 25.156609291s ago: executing program 9 (id=20148): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x8}}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x58}}, 0x8000) 24.502090737s ago: executing program 9 (id=20150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1b, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xfff3}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0xe30f, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @multicast}, 0x14) 24.062692699s ago: executing program 9 (id=20152): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a68000000180a01010000000000000000070000062c000380180003801400010076657468315f746f5f62617461647600080001400000000008000140000000000c0005400000000000000004080007400000000108000740000000010900020073797a300000000028000000160a010100000000000000000a00000508000740000000020900020073797a300000000088000000160a050000000000000000000700000558000380080001400000000004000380400003801400010070696d726567000000000000000000001400010076657468315f6d61637674617000000014000100697036746e6c30000000000000000000080001400000000008000740000000010900"], 0x140}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x62040200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x0) r5 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8) 23.07565746s ago: executing program 9 (id=20156): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x15, 0x5, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x10001, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llx, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x44}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0xa, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x541b, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'wg1\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0xff, 0xfd, 0x5, 0x4, 0x2, 0x4, 0x28, 0x1, 0x3, [0x1, 0x6, 0x2, 0x200, 0x81, 0x8001, 0x5]}}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, 0x0, 0x4040004) sendmmsg$inet(r0, &(0x7f0000005200), 0x0, 0x0) 21.759433087s ago: executing program 9 (id=20158): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x18, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, "99161d83"}, &(0x7f0000000080)=0x2c) writev(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 17.525202963s ago: executing program 48 (id=20129): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44001}, 0x4080) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) close(0x4) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) socket$packet(0x11, 0x3, 0x300) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f0000000f40)="82f5252be7dc93dfe06dd6116412c42be1ca316c088207d2a48756b23f3a13074aa35c301d591f03061d8fe0f70f307034cd539cfff48644efbc", 0x3a}], 0x2}}], 0x1, 0x4048894) 15.093700587s ago: executing program 2 (id=20176): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c007916", @ANYRES16=r1, @ANYBLOB="0100fdfffffffcdbdf254f0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800ab000000000008000b000000000006001100ffff0000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0xae5f}, &(0x7f0000000100)=0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000440)={@private1, 0x5, 0x1, 0x2, 0xb, 0x8, 0x4}, 0x20) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, 0x0, 0x0, 0x40800) recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[], 0xfe33) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0xe, 0x4, 0x470, 0xffffffff, 0x2f8, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ip={@multicast2, @broadcast, 0xffffffff, 0xffffff00, 'batadv_slave_1\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x16, 0x2, 0xd}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x6, 0x5, 0x3, 0x3, 0x1], 0x2, 0x1}, {0x0, [0x3, 0x4, 0x1, 0x6, 0x2, 0x4], 0x0, 0x8}}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x1, 0x2}}, @common=@unspec=@comment={{0x120}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9b, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x1, 0x4, 0x5, 0x3, 0x1, 0x6], 0x3, 0x1}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x0, 0x5}, {0x0, 0x1, 0x6}, 0x7ff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000010000100001c0000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a01040000000000000000010000f508000a40000000000900020073797a32000000000900010073797a3000000000080005400000000c580000000c0a010300000000000000000100000024000380200000802c869d8b2db04eca7f620400018018000b80140001800c000100636f756e746572000400028008000440000000000900010073797a30000000000900010073797a3100000000140000001000010000000000000000000000000a1b7f53d492df267e25aa121cc72bc0bd59c9a6b7fa036e626f61e5457bc0f431dfdac4a35778da10934c0339f6b67fc50dd334a793475ae5cbcf99ea921b85ded9e60f3121abf6b495923ae6e9bd07819df01caa97c0a7db0a785033a7bbca8368ead16250d2401a6b37053e81fe91fed5be7c8a776b279ea246f84f4004d40ccfb6ef7b9d78a3387715898760ecd6a4fd0cf61ee3e459a51631fa084d49466b5813f6eddafb600622d79d2c186cd74a5def20"], 0xdc}}, 0x0) 14.928295726s ago: executing program 2 (id=20177): unshare(0x6a040000) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x50, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xd}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0xffff}}, {0x4, 0x1b}}]}]}, 0x50}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, 0x0, 0x4000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000500)='vlan1\x00', 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x24048840) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000000)={0x7, 'vcan0\x00', {0x101}, 0x1000}) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, @loopback, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x3, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x4007}}) unshare(0x600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, 0x0) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x390, 0x0, 0x490, 0x1a0, 0xd0, 0x638, 0x638, 0x638, 0x638, 0x638, 0x6, 0x0, {[{{@ipv6={@private0, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xffffff00], [0xffffff00, 0xff000000, 0xffffff00, 0xff], 'erspan0\x00', 'syzkaller1\x00', {}, {}, 0x0, 0x3, 0x7, 0xc}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'erspan0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x33}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x0, 0x11}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@ipv6={@local, @mcast1, [], [], 'lo\x00', 'vlan1\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0xc}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 14.233345827s ago: executing program 2 (id=20179): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xb, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) write$cgroup_int(r1, &(0x7f0000000200)=0x8, 0x12) 13.249938399s ago: executing program 2 (id=20181): socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000080851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x2d, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x28}}, 0x802) 13.013678397s ago: executing program 49 (id=20140): unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000001040)=0x2a9, 0x4) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x83dff000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12.888937432s ago: executing program 2 (id=20183): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) unshare(0x42010400) bind$unix(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[], 0x3c}}, 0x20) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) socket(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x20000004, 0x2, 0x4}, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000240)=0xffffff82, 0x4) 12.811744207s ago: executing program 2 (id=20184): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x8}, 0x18) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x46) close(0x4) unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, 0x0, 0x32658) read(r6, 0x0, 0x0) 6.632081047s ago: executing program 50 (id=20158): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x18, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, "99161d83"}, &(0x7f0000000080)=0x2c) writev(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 3.287272063s ago: executing program 8 (id=20219): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff018}, {0x6, 0x5, 0x0, 0xffffff05}]}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x44, r4, 0x607, 0x270bd07, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}]}, 0x44}}, 0x4008400) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000140)=0x9, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r6}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x0) 3.252749455s ago: executing program 0 (id=20220): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x220c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xd}}, 0x0, 0x0, 0x26, 0x0, "2431d0edd90500000000000000acf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1fffc87060000000000000025"}, 0xd8) r8 = socket$netlink(0x10, 0x3, 0x8000000004) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r9}, 0x4) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r9, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003180)={0x1c, 0x25, 0x301, 0x670bd25, 0x25dfdbfd, {0x15}, [@typed={0x8, 0x100, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.901473779s ago: executing program 0 (id=20221): r0 = socket(0x28, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$packet(0x11, 0x2, 0x300) r2 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$alg(r1, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="13022cbd7000fbdbdf25010000000000000009410000004c00180000008662726f6164636173742d6c696e6b"], 0x68}}, 0x4000080) listen(r0, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x200440d4) r7 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r7, &(0x7f0000001680)=""/256, 0x100, 0x1120, 0x0, 0x0) 2.872244143s ago: executing program 8 (id=20222): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000300)={'netdevsim0\x00', @random="a9ab4542446b"}) write(r0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x1804}, 0x4) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000080)) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, r0, 0x17a46000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, &(0x7f0000000200)=0x8) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r8 = accept4(r7, 0x0, 0x0, 0x80000) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$inet6(r9, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x500, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 2.73525148s ago: executing program 6 (id=20223): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000200)=0x5, 0x4) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x3, 'nq\x00', 0x1, 0x4, 0x8}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x20, 0x70bd2b, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008804}, 0x4004000) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'rr\x00', 0x26, 0xc86, 0x15}, 0x2c) 2.56542677s ago: executing program 6 (id=20225): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64], 0x50) unshare(0x20000400) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x58}, 0x55) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={@map, 0xffffffffffffffff, 0x15, 0x4006}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x408c0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000002060102000000000000000006000002050005000200000005000400000000000c000780080012400010000014000300686173683a69702c706f72742c45700005000100070000000900020073797a3000000000"], 0x58}}, 0x8000) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 2.096820408s ago: executing program 8 (id=20226): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = socket(0x22, 0x6, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x80, 0x3, 0x18, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @dev={0xfe, 0x80, '\x00', 0x13}, 0x1, 0x80, 0xfffffffe, 0x80}}) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000200)=""/4096, &(0x7f00000000c0)=0x1000) write$cgroup_int(r0, &(0x7f0000000080), 0x12) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=ANY=[@ANYBLOB="c0010000100003040000000000", @ANYRES32=0x0, @ANYBLOB="00000000480000004800128009000100766c616e00000000380002800c0003000000000005000000280004800c000100ff0f0000000000000c00010006000000050000000c000100060000000900000014000300766c616e30000000000000000000000008002c00ff03000005"], 0x1c0}, 0x1, 0xba01}, 0x20048050) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x8000) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0107000000000000000067"], 0x28}, 0x1, 0x0, 0x0, 0x44844}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)={0x84, 0x5, '\x00', [@ra={0x5, 0x2, 0x1}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x8, {0x1, 0x0, 0x6, 0x6}}, @enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0x400}, @hao={0xc9, 0x10, @local}]}, 0x38) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030c000000ff0e0000000000000200090040000000700000000000000003000600000000000200000000000000000000000000000002000100000004d300000502000000e0030005003c00000002"], 0x60}, 0x1, 0x7}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.006400867s ago: executing program 0 (id=20227): ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000000)={0x40, 0x7}) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000900)) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000010054000000090a01040000000000000000070000000900010073797a30000000000c00098008000140600000020800"], 0x9c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r5, &(0x7f0000004400), 0x400000000000203, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004893}, 0x4000010) 1.8086282s ago: executing program 8 (id=20228): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) socket$kcm(0x1e, 0x5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0x5}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_VERSION={0x5, 0x6, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.725222976s ago: executing program 6 (id=20229): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x5, 0x1, 0x3, 0x3, 0xfd}, 0x8) 1.653927917s ago: executing program 0 (id=20230): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) shutdown(r0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x28c}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000d00)=r5, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 1.289650626s ago: executing program 8 (id=20231): r0 = socket$inet6(0xa, 0x5, 0x0) listen(r0, 0x10000) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r1, 0x4, 0xfffffffd, &(0x7f0000000280)=""/102, &(0x7f0000000140)=0x66) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r5, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e21, @broadcast}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) 1.040322577s ago: executing program 6 (id=20232): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff018}, {0x6, 0x5, 0x0, 0xffffff05}]}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x44, r4, 0x607, 0x270bd07, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}]}, 0x44}}, 0x4008400) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000140)=0x9, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r6}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x0) 474.196014ms ago: executing program 8 (id=20233): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000001850000007500000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r0}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x70bd2b, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6}}, 0x1c}}, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="000229bd7000fddbdf25790000007759990638d2ef7808000300", @ANYRES32=0x0, @ANYBLOB="0400f4000400f4000400f4000400f400"], 0x2c}, 0x1, 0x0, 0x0, 0x20004010}, 0xc0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0xfffffd21, &(0x7f0000000240)={&(0x7f0000000000)={0x38, r6, 0x1, 0x4, 0x8000000, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x0, 0x5, {[0x8000, 0x76, 0x2, 0xe, 0x3, 0x1e0, 0x0, 0x8]}}, @NL80211_TXRATE_HE_GI={0x0, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF, @NL80211_TXRATE_GI]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x100, 0xf3e2, 0x28}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000228bd7000fbdbdf253b1c000008000b00", @ANYRES32=r7, @ANYBLOB="080057001d110000080057008b0e00000c00cd000004080002000400"], 0x38}, 0x1, 0x0, 0x0, 0x20008010}, 0x24000000) 405.327382ms ago: executing program 0 (id=20234): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, 0x0, 0x0, 0x40, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)=0xb, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)=0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000700)={{{@in6=@private2, @in6=@private2, 0x4e21, 0xa000, 0x4e24, 0x7fff, 0xa, 0xa0, 0x0, 0x3a, 0x0, r3}, {0x2, 0x9, 0x8, 0x0, 0x6, 0x1b61, 0x2, 0x80}, {0x1, 0x7fffffff, 0x800, 0x7ff}, 0x81, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x3502, 0x1, 0x2, 0x1, 0x3, 0x6, 0x9}}, 0xe8) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c", 0x41}], 0x1}}], 0x1, 0x2090) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) 286.399223ms ago: executing program 6 (id=20235): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20008000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c357825577583a5fde8a3427cc42f7d63c6cf", 0x40) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES8=r1, @ANYBLOB="010329bd7000fcdbdf2524"], 0x20}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r3 = accept4(r2, 0x0, 0x0, 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'macvlan1\x00', 0x3}, 0x18) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 130.118382ms ago: executing program 6 (id=20236): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) unshare(0x62040200) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYRES64], 0x1c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r7], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 0s ago: executing program 0 (id=20237): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x15, 0x5, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x10001, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llx, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x44}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0xa, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x541b, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'wg1\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0xff, 0xfd, 0x5, 0x4, 0x2, 0x4, 0x28, 0x1, 0x3, [0x1, 0x6, 0x2, 0x200, 0x81, 0x8001, 0x5]}}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, 0x0, 0x4040004) sendmmsg$inet(r0, &(0x7f0000005200), 0x0, 0x0) kernel console output (not intermixed with test programs): 8 bytes leftover after parsing attributes in process `syz.7.19764'. [ 1253.761258][T18643] syzkaller0: entered promiscuous mode [ 1253.769058][T18643] syzkaller0: entered allmulticast mode [ 1253.779184][T18645] tipc: Started in network mode [ 1253.786916][T18645] tipc: Node identity 5ae3908208c, cluster identity 4711 [ 1253.796226][T18645] tipc: Enabled bearer , priority 0 [ 1253.823320][T18645] syzkaller0: entered promiscuous mode [ 1253.832374][T18645] syzkaller0: entered allmulticast mode [ 1253.845747][T18643] tipc: Started in network mode [ 1253.850683][T18643] tipc: Node identity 1ae7c6068a9b, cluster identity 4711 [ 1253.862292][T18643] tipc: Enabled bearer , priority 0 [ 1253.889430][T18645] tipc: Resetting bearer [ 1253.910263][T18642] tipc: Resetting bearer [ 1253.933004][T18642] tipc: Disabling bearer [ 1253.948822][T18644] tipc: Resetting bearer [ 1253.981996][T18644] tipc: Disabling bearer [ 1254.577199][T18650] lo speed is unknown, defaulting to 1000 [ 1254.585142][T18650] lo speed is unknown, defaulting to 1000 [ 1254.677331][T14103] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1254.687989][T14103] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1254.698037][T14103] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1254.718363][T14103] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1254.730070][T14103] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1255.003836][T18654] lo speed is unknown, defaulting to 1000 [ 1255.011868][T18654] lo speed is unknown, defaulting to 1000 [ 1255.205982][T18661] netlink: 4 bytes leftover after parsing attributes in process `syz.8.19773'. [ 1255.235693][ T1711] Bluetooth: hci8: command tx timeout [ 1255.298556][T18661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1255.306480][T18661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1255.482926][T18654] chnl_net:caif_netlink_parms(): no params data found [ 1255.695457][T18670] block nbd0: server does not support multiple connections per device. [ 1255.706932][T18670] block nbd0: shutting down sockets [ 1255.725328][T18654] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.732656][T18654] bridge0: port 1(bridge_slave_0) entered disabled state [ 1255.740158][T18654] bridge_slave_0: entered allmulticast mode [ 1255.749676][T18654] bridge_slave_0: entered promiscuous mode [ 1255.759479][T18654] bridge0: port 2(bridge_slave_1) entered blocking state [ 1255.767409][T18654] bridge0: port 2(bridge_slave_1) entered disabled state [ 1255.774878][T18654] bridge_slave_1: entered allmulticast mode [ 1255.783005][T18654] bridge_slave_1: entered promiscuous mode [ 1255.858763][T18654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1255.890048][T18654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1255.976356][T18679] IPv6: Can't replace route, no match found [ 1255.995311][T18654] team0: Port device team_slave_0 added [ 1256.014886][T18654] team0: Port device team_slave_1 added [ 1256.097112][T18654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1256.116279][T18654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1256.144836][T18654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1256.176221][T18654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1256.185807][T18654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1256.212662][T18654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1256.224967][T18685] tipc: Enabled bearer , priority 0 [ 1256.237094][T18685] syzkaller0: entered promiscuous mode [ 1256.242632][T18685] syzkaller0: entered allmulticast mode [ 1256.286931][T18685] tipc: Resetting bearer [ 1256.333159][T18684] tipc: Resetting bearer [ 1256.394129][T18684] tipc: Disabling bearer [ 1256.421441][T18692] netlink: 'syz.8.19780': attribute type 1 has an invalid length. [ 1256.509685][T18692] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1256.618968][T18694] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1256.660413][T18654] hsr_slave_0: entered promiscuous mode [ 1256.676243][T18654] hsr_slave_1: entered promiscuous mode [ 1256.682935][T18654] debugfs: 'hsr0' already exists in 'hsr' [ 1256.688872][T18654] Cannot create hsr debugfs directory [ 1256.711795][T18692] vlan2: entered allmulticast mode [ 1256.718856][T18692] veth1: entered allmulticast mode [ 1256.729682][T18692] veth1: entered promiscuous mode [ 1256.735915][T18692] veth1: left promiscuous mode [ 1256.745502][T18692] bond1: (slave vlan2): making interface the new active one [ 1256.756938][T18692] veth1: entered promiscuous mode [ 1256.756957][ T1711] Bluetooth: hci9: command tx timeout [ 1256.763754][T18692] vlan2: entered promiscuous mode [ 1256.776868][T18692] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 1256.812288][T18697] tipc: Enabled bearer , priority 0 [ 1256.824518][T18698] syzkaller0: entered promiscuous mode [ 1256.840075][T18698] syzkaller0: entered allmulticast mode [ 1256.909779][T18690] lo speed is unknown, defaulting to 1000 [ 1256.952602][T18690] lo speed is unknown, defaulting to 1000 [ 1256.965096][T18697] tipc: Resetting bearer [ 1257.047245][T18696] tipc: Resetting bearer [ 1257.086968][T18696] tipc: Disabling bearer [ 1257.315735][ T1711] Bluetooth: hci8: command tx timeout [ 1257.490366][T18654] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1257.572453][T18654] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1257.588420][T18654] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1257.611263][T18654] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1257.774388][T18704] lo speed is unknown, defaulting to 1000 [ 1257.782095][T18704] lo speed is unknown, defaulting to 1000 [ 1257.809601][T18654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1257.891972][T18654] 8021q: adding VLAN 0 to HW filter on device team0 [ 1257.913513][T29187] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.920886][T29187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1257.984489][T29187] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.991700][T29187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1258.291269][T18721] syzkaller0: entered promiscuous mode [ 1258.298156][T18721] syzkaller0: entered allmulticast mode [ 1258.850482][ T1711] Bluetooth: hci9: command tx timeout [ 1260.916343][ T1711] Bluetooth: hci9: command tx timeout [ 1261.041686][T18737] tipc: Enabled bearer , priority 0 [ 1261.049586][T18738] syzkaller0: entered promiscuous mode [ 1261.055313][T18738] syzkaller0: entered allmulticast mode [ 1261.069698][T18735] tipc: Resetting bearer [ 1261.096201][T18734] tipc: Resetting bearer [ 1261.118978][T18734] tipc: Disabling bearer [ 1261.140919][T18654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1261.428188][T18756] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 1261.508871][T18654] veth0_vlan: entered promiscuous mode [ 1261.526970][T18654] veth1_vlan: entered promiscuous mode [ 1261.568687][T18654] veth0_macvtap: entered promiscuous mode [ 1261.587201][T18654] veth1_macvtap: entered promiscuous mode [ 1261.613173][T18654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1261.645511][T18654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1261.665500][ T3722] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.682425][ T3722] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.710336][ T3722] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.730690][ T3722] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.809748][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1261.818484][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1261.876182][ T3722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1261.884939][ T3722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1262.343921][T18763] lo speed is unknown, defaulting to 1000 [ 1262.352255][T18763] lo speed is unknown, defaulting to 1000 [ 1262.786033][T18774] netlink: 164 bytes leftover after parsing attributes in process `syz.9.19795'. [ 1262.994428][ T1711] Bluetooth: hci9: command tx timeout [ 1263.056456][T18767] lo speed is unknown, defaulting to 1000 [ 1263.064609][T18767] lo speed is unknown, defaulting to 1000 [ 1263.871914][T18785] netlink: 'syz.7.19796': attribute type 39 has an invalid length. [ 1264.228273][T18799] siw: device registration error -23 [ 1264.724839][T18804] netlink: 'syz.9.19801': attribute type 10 has an invalid length. [ 1264.733887][T18804] bond0: (slave wlan1): Opening slave failed [ 1264.769835][T18797] lo speed is unknown, defaulting to 1000 [ 1264.780381][T18797] lo speed is unknown, defaulting to 1000 [ 1264.890389][T18810] syzkaller0: entered promiscuous mode [ 1264.904186][T18810] syzkaller0: entered allmulticast mode [ 1265.089066][T18808] lo speed is unknown, defaulting to 1000 [ 1265.101958][T18808] lo speed is unknown, defaulting to 1000 [ 1265.227249][T18815] nbd9: detected capacity change from 0 to 63 [ 1265.248138][T18819] block nbd9: NBD_DISCONNECT [ 1265.257630][T18819] block nbd9: Disconnected due to user request. [ 1265.275299][T18819] block nbd9: shutting down sockets [ 1265.344465][T18815] bond1: entered promiscuous mode [ 1265.349705][T18815] bond1: entered allmulticast mode [ 1265.355620][T18815] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1265.484992][T18817] lo speed is unknown, defaulting to 1000 [ 1265.492773][T18817] lo speed is unknown, defaulting to 1000 [ 1265.857626][T18835] netlink: 240 bytes leftover after parsing attributes in process `syz.9.19808'. [ 1265.940696][T18839] netlink: 12 bytes leftover after parsing attributes in process `syz.8.19810'. [ 1266.025251][T18839] bond1: (slave veth3): Releasing active interface [ 1266.031849][T18839] bond1: (slave veth3): the permanent HWaddr of slave - 3e:97:15:ad:1f:9b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1266.588566][T18841] lo speed is unknown, defaulting to 1000 [ 1266.626094][T18841] lo speed is unknown, defaulting to 1000 [ 1267.160145][T14103] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1267.171632][T14103] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1267.198115][T14103] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1267.209261][T14103] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1267.222413][T14103] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1267.385785][T18870] syzkaller0: entered promiscuous mode [ 1267.391332][T18870] syzkaller0: entered allmulticast mode [ 1267.676540][T18862] lo speed is unknown, defaulting to 1000 [ 1267.696459][T18862] lo speed is unknown, defaulting to 1000 [ 1267.768524][T18877] syzkaller0: entered promiscuous mode [ 1267.774326][T18877] syzkaller0: entered allmulticast mode [ 1268.070226][T18881] tipc: Enabled bearer , priority 0 [ 1268.079664][T18881] syzkaller0: entered promiscuous mode [ 1268.094360][T18881] syzkaller0: entered allmulticast mode [ 1268.178813][T18887] syzkaller0: entered promiscuous mode [ 1268.194555][T18887] syzkaller0: entered allmulticast mode [ 1268.211291][T18881] tipc: Resetting bearer [ 1268.226596][T18862] chnl_net:caif_netlink_parms(): no params data found [ 1268.269185][T18880] tipc: Resetting bearer [ 1268.305186][T18880] tipc: Disabling bearer [ 1268.525576][T18862] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.544265][T18862] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.551669][T18862] bridge_slave_0: entered allmulticast mode [ 1268.560408][T18862] bridge_slave_0: entered promiscuous mode [ 1268.570003][T18862] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.584296][T18862] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.592540][T18862] bridge_slave_1: entered allmulticast mode [ 1268.601970][T18862] bridge_slave_1: entered promiscuous mode [ 1268.691296][T18862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1268.728676][T18862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1268.895631][T18900] netlink: 'syz.9.19827': attribute type 1 has an invalid length. [ 1269.056502][T18899] syz_tun: entered allmulticast mode [ 1269.071972][T18896] dvmrp6: entered allmulticast mode [ 1269.082912][T18895] syz_tun: left allmulticast mode [ 1269.091436][T18862] team0: Port device team_slave_0 added [ 1269.116449][T18862] team0: Port device team_slave_1 added [ 1269.298957][T18862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1269.307096][T18862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1269.354365][ T1711] Bluetooth: hci10: command tx timeout [ 1269.357898][T18862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1269.384639][T18904] tipc: Enabling of bearer rejected, failed to enable media [ 1269.416673][T18862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1269.434204][T18862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1269.460541][T18862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1269.616809][T18862] hsr_slave_0: entered promiscuous mode [ 1269.634418][T18862] hsr_slave_1: entered promiscuous mode [ 1269.641399][T18862] debugfs: 'hsr0' already exists in 'hsr' [ 1269.667574][T18862] Cannot create hsr debugfs directory [ 1270.157350][T18922] tipc: Started in network mode [ 1270.166172][T18922] tipc: Node identity e61281a6cfe3, cluster identity 4711 [ 1270.173926][T18922] tipc: Enabled bearer , priority 0 [ 1270.190315][T18924] syzkaller0: entered promiscuous mode [ 1270.196489][T18924] syzkaller0: entered allmulticast mode [ 1270.333237][T18922] tipc: Resetting bearer [ 1270.347578][T18921] tipc: Resetting bearer [ 1270.375047][T18921] tipc: Disabling bearer [ 1270.501960][T18919] lo speed is unknown, defaulting to 1000 [ 1270.510726][T18919] lo speed is unknown, defaulting to 1000 [ 1270.833060][T18862] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1270.855632][T18862] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1270.879417][T18862] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1270.911093][T18862] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1270.927943][T18926] lo speed is unknown, defaulting to 1000 [ 1270.967159][T18938] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1270.978384][T18926] lo speed is unknown, defaulting to 1000 [ 1271.207828][T18862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1271.232257][T18862] 8021q: adding VLAN 0 to HW filter on device team0 [ 1271.247836][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.255160][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1271.286108][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.293466][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1271.394561][ T1711] Bluetooth: hci10: command tx timeout [ 1271.718611][T18862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1271.780488][T14103] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1271.792598][T14103] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1271.804742][T14103] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1271.815337][T14103] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1271.815861][T18862] veth0_vlan: entered promiscuous mode [ 1271.823464][T14103] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1271.883285][T18862] veth1_vlan: entered promiscuous mode [ 1271.929544][T18958] netlink: 12 bytes leftover after parsing attributes in process `syz.7.19837'. [ 1272.008965][T18958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1272.088723][T18960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1272.116017][T18960] bond1: (slave bond0): Enslaving as an active interface with an up link [ 1272.338402][T18958] bond1 (unregistering): (slave bond0): Releasing backup interface [ 1272.364912][T18958] bond1 (unregistering): Released all slaves [ 1272.407359][T18862] veth0_macvtap: entered promiscuous mode [ 1272.415262][T18953] lo speed is unknown, defaulting to 1000 [ 1272.428728][T18862] veth1_macvtap: entered promiscuous mode [ 1272.440082][T18953] lo speed is unknown, defaulting to 1000 [ 1272.507179][T18862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1272.532418][T18968] netlink: 'syz.9.19840': attribute type 13 has an invalid length. [ 1272.541704][T18968] netlink: 'syz.9.19840': attribute type 17 has an invalid length. [ 1272.550753][T18862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1272.662729][T18968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1272.750896][ T1016] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.779601][ T1016] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.791605][ T1016] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.807707][ T1016] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.059772][T18967] lo speed is unknown, defaulting to 1000 [ 1273.118764][T18967] lo speed is unknown, defaulting to 1000 [ 1273.224301][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1273.232202][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1273.260745][T18953] chnl_net:caif_netlink_parms(): no params data found [ 1273.357072][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1273.367266][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1273.399299][T18970] lo speed is unknown, defaulting to 1000 [ 1273.474580][T14103] Bluetooth: hci10: command tx timeout [ 1273.480710][T18970] lo speed is unknown, defaulting to 1000 [ 1273.577835][T18982] tipc: Enabled bearer , priority 0 [ 1273.618042][T18984] syzkaller0: entered promiscuous mode [ 1273.623569][T18984] syzkaller0: entered allmulticast mode [ 1273.632086][T18982] syzkaller0: entered promiscuous mode [ 1273.638139][T18982] syzkaller0: entered allmulticast mode [ 1273.647076][T18953] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.654547][T18953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.661939][T18953] bridge_slave_0: entered allmulticast mode [ 1273.669914][T18953] bridge_slave_0: entered promiscuous mode [ 1273.679513][T18953] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.686970][T18953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.698229][T18953] bridge_slave_1: entered allmulticast mode [ 1273.706071][T18953] bridge_slave_1: entered promiscuous mode [ 1273.797456][T18985] tipc: Resetting bearer [ 1273.830962][T18980] tipc: Resetting bearer [ 1273.860160][T18980] tipc: Disabling bearer [ 1273.874276][T14103] Bluetooth: hci11: command tx timeout [ 1273.892728][T18953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1273.911617][T18953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1273.930747][T18988] siw: device registration error -23 [ 1273.996860][T18953] team0: Port device team_slave_0 added [ 1274.008049][T18953] team0: Port device team_slave_1 added [ 1274.065774][T18953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1274.072971][T18953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1274.103318][T18953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1274.147612][T18953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1274.154874][T18953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1274.182149][T18953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1274.315522][T18953] hsr_slave_0: entered promiscuous mode [ 1274.322772][T18953] hsr_slave_1: entered promiscuous mode [ 1274.333062][T18953] debugfs: 'hsr0' already exists in 'hsr' [ 1274.342210][T18953] Cannot create hsr debugfs directory [ 1274.388245][T18996] xt_hashlimit: size too large, truncated to 1048576 [ 1274.717536][T19003] syzkaller0: entered promiscuous mode [ 1274.723076][T19003] syzkaller0: entered allmulticast mode [ 1275.563742][T14103] Bluetooth: hci10: command tx timeout [ 1275.586985][T19006] lo speed is unknown, defaulting to 1000 [ 1275.598992][T19006] lo speed is unknown, defaulting to 1000 [ 1275.602767][T18953] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1275.625046][T18953] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1275.636614][T18953] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1275.667167][T18953] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1275.811529][T18953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1275.848792][T18953] 8021q: adding VLAN 0 to HW filter on device team0 [ 1275.868486][ T3722] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.875710][ T3722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1275.898845][ T3722] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.906025][ T3722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1275.955090][T14103] Bluetooth: hci11: command tx timeout [ 1276.071593][T19020] syzkaller0: entered promiscuous mode [ 1276.078788][T19020] syzkaller0: entered allmulticast mode [ 1276.328408][T18953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1276.393450][T18953] veth0_vlan: entered promiscuous mode [ 1276.409603][T18953] veth1_vlan: entered promiscuous mode [ 1276.451415][T18953] veth0_macvtap: entered promiscuous mode [ 1276.463420][T18953] veth1_macvtap: entered promiscuous mode [ 1276.492699][T18953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1276.522797][T18953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1276.543719][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.555151][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.574619][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.653920][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.747742][T19028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1276.761589][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1276.774162][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1276.802880][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1276.811192][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1277.295389][ T3722] vlan2: left promiscuous mode [ 1277.837427][T19044] lo speed is unknown, defaulting to 1000 [ 1277.846397][T19044] lo speed is unknown, defaulting to 1000 [ 1278.001677][T19050] tipc: Started in network mode [ 1278.006905][T19050] tipc: Node identity 6e7e0e5695f6, cluster identity 4711 [ 1278.015994][T19050] tipc: Enabled bearer , priority 0 [ 1278.027986][T19050] syzkaller0: entered promiscuous mode [ 1278.033827][T19050] syzkaller0: entered allmulticast mode [ 1278.084693][T14103] Bluetooth: hci11: command tx timeout [ 1278.119525][T19050] tipc: Resetting bearer [ 1278.136138][T19049] tipc: Resetting bearer [ 1278.158395][T19049] tipc: Disabling bearer [ 1278.209346][T19053] netlink: 'syz.8.19859': attribute type 13 has an invalid length. [ 1278.218774][T19053] netlink: 'syz.8.19859': attribute type 17 has an invalid length. [ 1278.287419][T19053] ip6_vti0: left promiscuous mode [ 1278.372113][T19053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1278.395972][T19053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1278.562961][T19062] tipc: Started in network mode [ 1278.569254][T19062] tipc: Node identity 763c44d00346, cluster identity 4711 [ 1278.583334][T19062] tipc: Enabled bearer , priority 0 [ 1278.603146][T19062] syzkaller0: entered promiscuous mode [ 1278.609946][T19062] syzkaller0: entered allmulticast mode [ 1278.646548][T19062] netlink: 2 bytes leftover after parsing attributes in process `syz.2.19861'. [ 1278.671338][T19062] tipc: Resetting bearer [ 1278.684677][T19061] tipc: Resetting bearer [ 1278.725063][T19061] tipc: Disabling bearer [ 1278.753753][T19068] syzkaller0: entered promiscuous mode [ 1278.761460][T19068] syzkaller0: entered allmulticast mode [ 1278.772148][T19067] tipc: Enabled bearer , priority 0 [ 1278.808241][T19067] syzkaller0: entered promiscuous mode [ 1278.814907][T19067] syzkaller0: entered allmulticast mode [ 1278.854940][T19067] tipc: Resetting bearer [ 1278.876903][T19066] tipc: Resetting bearer [ 1278.900609][T19066] tipc: Disabling bearer [ 1278.921481][T19070] syzkaller0: entered promiscuous mode [ 1278.927511][T19070] syzkaller0: entered allmulticast mode [ 1279.011499][T19075] xt_hashlimit: size too large, truncated to 1048576 [ 1279.176088][T19081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19868'. [ 1279.283035][T19081] bridge_slave_1: left allmulticast mode [ 1279.309713][T19081] bridge_slave_1: left promiscuous mode [ 1279.328809][T19081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.347527][T19081] bridge_slave_0: left allmulticast mode [ 1279.353260][T19081] bridge_slave_0: left promiscuous mode [ 1279.359209][T19081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.118838][T14103] Bluetooth: hci11: command tx timeout [ 1280.500086][T19098] lo speed is unknown, defaulting to 1000 [ 1280.508339][T19098] lo speed is unknown, defaulting to 1000 [ 1280.590316][T19103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19875'. [ 1280.700085][T19106] netlink: 28 bytes leftover after parsing attributes in process `syz.8.19876'. [ 1280.709564][T19106] netlink: 28 bytes leftover after parsing attributes in process `syz.8.19876'. [ 1280.722113][T19106] syzkaller0: entered promiscuous mode [ 1280.727932][T19106] syzkaller0: entered allmulticast mode [ 1280.766560][T19108] tipc: Enabled bearer , priority 0 [ 1280.774687][T19108] syzkaller0: entered promiscuous mode [ 1280.780357][T19108] syzkaller0: entered allmulticast mode [ 1280.818756][T19108] tipc: Resetting bearer [ 1280.830980][T19107] tipc: Resetting bearer [ 1280.861490][T19107] tipc: Disabling bearer [ 1280.881978][T19110] syzkaller0: entered promiscuous mode [ 1280.887674][T19110] syzkaller0: entered allmulticast mode [ 1281.053759][T19115] tipc: Enabled bearer , priority 0 [ 1281.062257][T19115] syzkaller0: entered promiscuous mode [ 1281.068115][T19115] syzkaller0: entered allmulticast mode [ 1281.107116][T19115] tipc: Resetting bearer [ 1281.117874][T19114] tipc: Resetting bearer [ 1281.143661][T19114] tipc: Disabling bearer [ 1281.855755][T19118] syzkaller0: entered promiscuous mode [ 1281.861960][T19118] syzkaller0: entered allmulticast mode [ 1282.251335][T19124] tipc: Enabled bearer , priority 0 [ 1282.263202][T19124] syzkaller0: entered promiscuous mode [ 1282.269715][T19124] syzkaller0: entered allmulticast mode [ 1282.323925][T19124] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1282.338581][T19128] netlink: 'syz.8.19886': attribute type 1 has an invalid length. [ 1282.489422][T19128] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 1282.499838][T19128] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 1282.513839][T19128] bond2: (slave vcan1): making interface the new active one [ 1282.525952][T19128] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 1282.537445][T19130] tipc: Resetting bearer [ 1282.551292][T19131] bond2: (slave vcan2): The slave device specified does not support setting the MAC address [ 1282.565843][T19131] bond2: (slave vcan2): Enslaving as a backup interface with an up link [ 1282.578667][T19132] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1282.587597][T19123] tipc: Resetting bearer [ 1282.620642][T19123] tipc: Disabling bearer [ 1284.974324][T19150] netlink: 164 bytes leftover after parsing attributes in process `syz.3.19889'. [ 1285.083138][T19156] netlink: 4 bytes leftover after parsing attributes in process `syz.8.19900'. [ 1285.133730][T19156] bridge_slave_1: left allmulticast mode [ 1285.228483][T19156] bridge_slave_1: left promiscuous mode [ 1285.257572][T19156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.284221][T19156] bridge_slave_0: left allmulticast mode [ 1285.294346][T19156] bridge_slave_0: left promiscuous mode [ 1285.301495][T19156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.080915][T19165] vlan2: left allmulticast mode [ 1286.087284][T19165] veth1: left allmulticast mode [ 1286.171352][ T36] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.194659][ T36] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 1286.204979][ T36] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.224592][ T36] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 1286.234394][ T36] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.243308][ T36] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 1286.284381][ T36] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.293320][ T36] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 1286.692201][T19166] lo speed is unknown, defaulting to 1000 [ 1286.700193][T19166] lo speed is unknown, defaulting to 1000 [ 1287.444458][T19177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19895'. [ 1287.716835][T19177] team0 (unregistering): Port device team_slave_0 removed [ 1287.737987][T19177] team0 (unregistering): Port device team_slave_1 removed [ 1288.041483][T19182] tipc: Enabled bearer , priority 0 [ 1288.083051][T19182] syzkaller0: entered promiscuous mode [ 1288.088920][T19182] syzkaller0: entered allmulticast mode [ 1288.139224][T19182] tipc: Resetting bearer [ 1288.163286][T19181] tipc: Resetting bearer [ 1288.269302][T19181] tipc: Disabling bearer [ 1288.471788][ T1711] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1288.482273][ T1711] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1288.493745][ T1711] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1288.508541][ T1711] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1288.517821][ T1711] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1288.531761][T19186] syzkaller0: entered promiscuous mode [ 1288.542775][T19186] syzkaller0: entered allmulticast mode [ 1288.632848][T14103] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1288.642744][T14103] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1288.657320][T14103] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1288.667894][T14103] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1288.679321][T14103] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1288.758338][T19195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19902'. [ 1289.002571][T19199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19905'. [ 1289.016240][T19199] tipc: New replicast peer: 255.255.255.255 [ 1289.023122][T19199] tipc: Enabled bearer , priority 6 [ 1289.035987][T19199] netlink: 'syz.3.19905': attribute type 1 has an invalid length. [ 1289.044502][T19199] netlink: 224 bytes leftover after parsing attributes in process `syz.3.19905'. [ 1289.386654][T19187] lo speed is unknown, defaulting to 1000 [ 1289.421858][T19187] lo speed is unknown, defaulting to 1000 [ 1289.858060][T19192] lo speed is unknown, defaulting to 1000 [ 1289.866482][T19192] lo speed is unknown, defaulting to 1000 [ 1290.023624][T19187] chnl_net:caif_netlink_parms(): no params data found [ 1290.169554][T20515] tipc: Node number set to 4219997782 [ 1290.296279][T19187] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.303487][T19187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.334824][T19187] bridge_slave_0: entered allmulticast mode [ 1290.343783][T19187] bridge_slave_0: entered promiscuous mode [ 1290.375339][T19187] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.382690][T19187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.390799][T19187] bridge_slave_1: entered allmulticast mode [ 1290.400583][T19187] bridge_slave_1: entered promiscuous mode [ 1290.509665][T19187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1290.531924][T19187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1290.595115][T14103] Bluetooth: hci12: command tx timeout [ 1290.685832][T19187] team0: Port device team_slave_0 added [ 1290.697659][T19192] chnl_net:caif_netlink_parms(): no params data found [ 1290.749736][T19187] team0: Port device team_slave_1 added [ 1290.755570][T14103] Bluetooth: hci13: command tx timeout [ 1290.917390][T19187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1290.927513][T19187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1290.954491][T19187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1290.968192][T19224] syzkaller0: entered promiscuous mode [ 1290.974982][T19224] syzkaller0: entered allmulticast mode [ 1291.022876][T19187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1291.030632][T19187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1291.057639][T19187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1291.182473][T19192] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.192549][T19192] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.201328][T19192] bridge_slave_0: entered allmulticast mode [ 1291.211579][T19192] bridge_slave_0: entered promiscuous mode [ 1291.281775][T19187] hsr_slave_0: entered promiscuous mode [ 1291.291586][T19187] hsr_slave_1: entered promiscuous mode [ 1291.322414][T19187] debugfs: 'hsr0' already exists in 'hsr' [ 1291.331586][T19187] Cannot create hsr debugfs directory [ 1291.387920][T19192] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.397536][T19192] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.411098][T19192] bridge_slave_1: entered allmulticast mode [ 1291.421679][T19192] bridge_slave_1: entered promiscuous mode [ 1291.542290][T19192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1291.562566][T19192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1291.581869][T19230] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19911'. [ 1291.657066][T19192] team0: Port device team_slave_0 added [ 1291.687172][T19192] team0: Port device team_slave_1 added [ 1291.856835][T19192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1291.864633][T19192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1291.924140][T19192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1291.960623][T19192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1291.974231][T19192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1292.034921][T19192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1292.077401][ T30] audit: type=1800 audit(1764044696.032:14): pid=19234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.19912" name="memory.events" dev="tmpfs" ino=128 res=0 errno=0 [ 1292.346140][T19192] hsr_slave_0: entered promiscuous mode [ 1292.365757][T19192] hsr_slave_1: entered promiscuous mode [ 1292.383038][T19192] debugfs: 'hsr0' already exists in 'hsr' [ 1292.394051][T19192] Cannot create hsr debugfs directory [ 1292.674549][T14103] Bluetooth: hci12: command tx timeout [ 1292.834497][T14103] Bluetooth: hci13: command tx timeout [ 1292.854909][T19187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1292.871617][T19187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1292.912669][T19187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1292.934897][T19187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1293.281869][T19187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1293.322018][T19192] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1293.358595][T19187] 8021q: adding VLAN 0 to HW filter on device team0 [ 1293.366197][T19192] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1293.386640][T19192] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1293.419817][T19192] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1293.442229][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.449541][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1293.487169][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.494436][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1293.735879][T19264] tipc: Enabled bearer , priority 0 [ 1293.761815][T19264] syzkaller0: entered promiscuous mode [ 1293.768200][T19264] syzkaller0: entered allmulticast mode [ 1293.797747][T19192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1293.845218][T19264] tipc: Resetting bearer [ 1293.883771][T19263] tipc: Resetting bearer [ 1293.926701][T19263] tipc: Disabling bearer [ 1293.948273][T19192] 8021q: adding VLAN 0 to HW filter on device team0 [ 1293.997607][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.004850][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1294.016636][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.024061][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1294.239599][T19187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1294.399212][T19187] veth0_vlan: entered promiscuous mode [ 1294.440998][T19187] veth1_vlan: entered promiscuous mode [ 1294.547541][T19187] veth0_macvtap: entered promiscuous mode [ 1294.572060][T19187] veth1_macvtap: entered promiscuous mode [ 1294.664748][T19187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1294.702174][T19187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1294.755034][T14103] Bluetooth: hci12: command tx timeout [ 1294.770815][T11573] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.790598][T11573] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.799937][T11573] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.826590][T11573] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.851802][T19192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1294.914740][T14103] Bluetooth: hci13: command tx timeout [ 1295.134604][T19192] veth0_vlan: entered promiscuous mode [ 1295.172531][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.180679][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.181398][T19192] veth1_vlan: entered promiscuous mode [ 1295.211431][T11573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.240457][T11573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.269926][T19281] tc_dump_action: action bad kind [ 1295.380368][T19192] veth0_macvtap: entered promiscuous mode [ 1295.441497][T19192] veth1_macvtap: entered promiscuous mode [ 1295.468745][T19285] tipc: Enabled bearer , priority 0 [ 1295.497782][T19285] syzkaller0: entered promiscuous mode [ 1295.528413][T19285] syzkaller0: entered allmulticast mode [ 1295.725494][T19192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1295.752605][T19293] tipc: Resetting bearer [ 1295.789390][T19192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1295.841472][T19283] tipc: Resetting bearer [ 1295.899885][T19283] tipc: Disabling bearer [ 1295.927624][T11573] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.937463][T11573] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.966816][T19296] syzkaller0: entered promiscuous mode [ 1295.972350][T19296] syzkaller0: entered allmulticast mode [ 1295.980148][T11573] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.991059][T11573] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.031858][T19298] tipc: Enabled bearer , priority 0 [ 1296.071823][T19298] syzkaller0: entered promiscuous mode [ 1296.077623][T19298] syzkaller0: entered allmulticast mode [ 1296.231307][T19298] tipc: Resetting bearer [ 1296.278097][T19306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19927'. [ 1296.385708][T19297] tipc: Resetting bearer [ 1296.437260][T19297] tipc: Disabling bearer [ 1296.453311][T19306] bridge_slave_1: left allmulticast mode [ 1296.459423][T19306] bridge_slave_1: left promiscuous mode [ 1296.466002][T19306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.478542][T19306] bridge_slave_0: left allmulticast mode [ 1296.484614][T19306] bridge_slave_0: left promiscuous mode [ 1296.490580][T19306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.659581][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1296.689201][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1296.785318][ T3722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1296.805298][ T3722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1296.824383][T19313] netlink: 'syz.1.19929': attribute type 1 has an invalid length. [ 1296.844323][T14103] Bluetooth: hci12: command tx timeout [ 1296.909276][T19313] bond1 (unregistering): Released all slaves [ 1296.985488][T19321] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19929'. [ 1296.995418][T14103] Bluetooth: hci13: command tx timeout [ 1297.082364][T19313] vlan2: entered promiscuous mode [ 1297.099732][T19313] ip6gretap0: entered promiscuous mode [ 1297.382664][T19331] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19934'. [ 1297.707414][T19340] tipc: Enabled bearer , priority 0 [ 1297.722773][T19340] syzkaller0: entered promiscuous mode [ 1297.733626][T19340] syzkaller0: entered allmulticast mode [ 1297.822838][T19340] tipc: Resetting bearer [ 1297.858665][T19339] tipc: Resetting bearer [ 1297.926470][T19339] tipc: Disabling bearer [ 1297.967234][T19342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19937'. [ 1298.396398][T19351] netlink: 'syz.3.19941': attribute type 13 has an invalid length. [ 1298.424611][T19351] netlink: 'syz.3.19941': attribute type 17 has an invalid length. [ 1298.708862][T19351] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1299.048096][T19362] netlink: 1 bytes leftover after parsing attributes in process `syz.0.19943'. [ 1299.143321][T19365] lo: entered promiscuous mode [ 1299.169457][T14103] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1299.184967][T19365] tunl0: entered promiscuous mode [ 1299.200500][T19365] gre0: entered promiscuous mode [ 1299.224919][T19365] gretap0: entered promiscuous mode [ 1299.262000][T19365] erspan0: entered promiscuous mode [ 1299.297506][T19365] ip_vti0: entered promiscuous mode [ 1299.331032][T19365] ip6_vti0: entered promiscuous mode [ 1299.356192][T19365] sit0: entered promiscuous mode [ 1299.393347][T19365] ip6tnl0: entered promiscuous mode [ 1299.415546][T19365] ip6gre0: entered promiscuous mode [ 1299.436038][T19365] syz_tun: entered promiscuous mode [ 1299.458405][T19365] vcan0: entered promiscuous mode [ 1299.477720][T19365] bond0: entered promiscuous mode [ 1299.493260][T19365] bond_slave_0: entered promiscuous mode [ 1299.501919][T19368] netlink: 'syz.0.19946': attribute type 13 has an invalid length. [ 1299.509743][T19365] bond_slave_1: entered promiscuous mode [ 1299.534317][T19365] team0: entered promiscuous mode [ 1299.550031][T19365] team_slave_0: entered promiscuous mode [ 1299.567929][T19365] team_slave_1: entered promiscuous mode [ 1299.582516][T19365] dummy0: entered promiscuous mode [ 1299.589736][T19365] nlmon0: entered promiscuous mode [ 1299.597469][T19365] caif0: entered promiscuous mode [ 1299.602648][T19365] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1299.786800][T19368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.794717][T19368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.968983][T19368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1299.988373][T19368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1300.178478][T19348] lo speed is unknown, defaulting to 1000 [ 1300.218128][T11573] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.228114][T11573] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.246483][T19348] lo speed is unknown, defaulting to 1000 [ 1300.246995][T11573] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.295445][T11573] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.494469][T19380] netlink: 9 bytes leftover after parsing attributes in process `syz.0.19950'. [ 1300.526478][T19380] netlink: 9 bytes leftover after parsing attributes in process `syz.0.19950'. [ 1300.980639][T19376] lo speed is unknown, defaulting to 1000 [ 1301.006246][T19376] lo speed is unknown, defaulting to 1000 [ 1301.433156][T19374] lo speed is unknown, defaulting to 1000 [ 1301.441881][T19374] lo speed is unknown, defaulting to 1000 [ 1301.579618][ T1711] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1301.593591][ T1711] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1301.602894][ T1711] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1301.614226][ T1711] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1301.623846][ T1711] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1302.232666][T19396] lo speed is unknown, defaulting to 1000 [ 1302.254380][T19396] lo speed is unknown, defaulting to 1000 [ 1302.481918][T19409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19956'. [ 1302.671561][T19409] team1: entered promiscuous mode [ 1302.679128][T19409] team1: entered allmulticast mode [ 1302.685494][T19409] 8021q: adding VLAN 0 to HW filter on device team1 [ 1302.698448][T19406] lo speed is unknown, defaulting to 1000 [ 1302.715033][T19406] lo speed is unknown, defaulting to 1000 [ 1302.945702][T19415] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1302.957316][T11850] IPVS: starting estimator thread 0... [ 1303.044156][T19418] IPVS: using max 27 ests per chain, 64800 per kthread [ 1303.111829][T19396] chnl_net:caif_netlink_parms(): no params data found [ 1303.551241][T19396] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.573264][T19396] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.588730][T19396] bridge_slave_0: entered allmulticast mode [ 1303.601864][T19396] bridge_slave_0: entered promiscuous mode [ 1303.625125][T19396] bridge0: port 2(bridge_slave_1) entered blocking state [ 1303.640630][T19396] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.659400][T19396] bridge_slave_1: entered allmulticast mode [ 1303.668212][T19396] bridge_slave_1: entered promiscuous mode [ 1303.678835][T19423] lo speed is unknown, defaulting to 1000 [ 1303.717932][T14103] Bluetooth: hci14: command tx timeout [ 1303.727840][T19423] lo speed is unknown, defaulting to 1000 [ 1303.750767][T19396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1303.751165][T19438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19962'. [ 1303.765664][T19396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1303.857828][T19440] netlink: 48 bytes leftover after parsing attributes in process `syz.1.19963'. [ 1303.910758][T19396] team0: Port device team_slave_0 added [ 1303.936651][T19396] team0: Port device team_slave_1 added [ 1304.019595][T19396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1304.026845][T19396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1304.055435][T19396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1304.070864][T19396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1304.078313][T19396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1304.105590][T19396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1304.191801][T19396] hsr_slave_0: entered promiscuous mode [ 1304.206924][T19396] hsr_slave_1: entered promiscuous mode [ 1304.215383][T19396] debugfs: 'hsr0' already exists in 'hsr' [ 1304.229589][T19396] Cannot create hsr debugfs directory [ 1304.312953][T19451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19967'. [ 1304.342777][T19451] bond_slave_0: entered promiscuous mode [ 1304.348943][T19451] bond_slave_1: entered promiscuous mode [ 1304.358288][T19451] macvtap1: entered promiscuous mode [ 1304.363771][T19451] bond0: entered promiscuous mode [ 1304.365149][T19453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19967'. [ 1304.371285][T19451] macvtap1: entered allmulticast mode [ 1304.384382][T19451] bond0: entered allmulticast mode [ 1304.390439][T19451] bond_slave_0: entered allmulticast mode [ 1304.396659][T19451] bond_slave_1: entered allmulticast mode [ 1304.403810][T19451] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1304.421334][T19453] bond0: left allmulticast mode [ 1304.426491][T19453] bond_slave_0: left allmulticast mode [ 1304.432151][T19453] bond_slave_1: left allmulticast mode [ 1304.438154][T19453] bond0: left promiscuous mode [ 1304.443949][T19453] bond_slave_0: left promiscuous mode [ 1304.450159][T19453] bond_slave_1: left promiscuous mode [ 1304.464672][T19454] syzkaller0: entered promiscuous mode [ 1304.470329][T19454] syzkaller0: entered allmulticast mode [ 1304.597958][T19456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19968'. [ 1304.745345][T19396] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.906483][T19396] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.042647][T19396] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.177891][T19396] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.361620][T19477] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1305.369400][ T6103] IPVS: starting estimator thread 0... [ 1305.436937][T19396] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1305.463607][T19396] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1305.475142][T19481] IPVS: using max 25 ests per chain, 60000 per kthread [ 1305.481991][T19396] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1305.506860][T19396] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1305.558085][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1305.794515][T14103] Bluetooth: hci14: command tx timeout [ 1305.821701][T19396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1305.867127][T19496] netlink: 'syz.1.19979': attribute type 2 has an invalid length. [ 1305.891312][T19396] 8021q: adding VLAN 0 to HW filter on device team0 [ 1305.916116][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.923359][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1305.948737][T11573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.955951][T11573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1306.443809][T19510] netdevsim netdevsim3: Direct firmware load for þ failed with error -2 [ 1306.515114][T19510] netdevsim netdevsim3: Falling back to sysfs fallback for: þ [ 1306.538046][T19396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1306.877018][T19501] lo speed is unknown, defaulting to 1000 [ 1306.912933][T19501] lo speed is unknown, defaulting to 1000 [ 1307.341541][T19396] veth0_vlan: entered promiscuous mode [ 1307.367812][T19396] veth1_vlan: entered promiscuous mode [ 1307.437065][T19523] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1307.473871][T19523] bond1: (slave ip6gretap1): making interface the new active one [ 1307.488805][T19523] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1307.536986][T19396] veth0_macvtap: entered promiscuous mode [ 1307.553416][T19396] veth1_macvtap: entered promiscuous mode [ 1307.596243][T19396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1307.613929][T19396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1307.632314][ T145] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.659159][ T145] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.673589][ T145] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.682961][ T145] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.790837][T11573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1307.804493][T11573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1307.843447][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1307.858044][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1307.875315][T14103] Bluetooth: hci14: command tx timeout [ 1308.178770][T19534] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1308.297902][T19539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19988'. [ 1308.550955][T19544] syzkaller0: entered promiscuous mode [ 1308.557008][T19544] syzkaller0: entered allmulticast mode [ 1308.590575][T19544] tipc: Enabled bearer , priority 0 [ 1308.607413][T19543] tipc: Resetting bearer [ 1308.663626][T19543] tipc: Disabling bearer [ 1308.888924][T19552] netlink: 'syz.6.19994': attribute type 10 has an invalid length. [ 1308.898733][T19552] netlink: 40 bytes leftover after parsing attributes in process `syz.6.19994'. [ 1308.908135][T19552] dummy0: entered promiscuous mode [ 1308.915844][T19552] bridge0: port 3(dummy0) entered blocking state [ 1308.923175][T19552] bridge0: port 3(dummy0) entered disabled state [ 1308.924870][T19550] nbd0: detected capacity change from 0 to 127 [ 1308.931918][T19552] dummy0: entered allmulticast mode [ 1308.950846][T19552] bridge0: port 3(dummy0) entered blocking state [ 1308.957497][T19552] bridge0: port 3(dummy0) entered forwarding state [ 1308.983042][T19550] netlink: 64 bytes leftover after parsing attributes in process `syz.1.19992'. [ 1309.010672][T14103] block nbd0: Receive control failed (result -32) [ 1309.245085][T19559] tipc: Started in network mode [ 1309.250270][T19559] tipc: Node identity 269232427f7c, cluster identity 4711 [ 1309.258300][T19559] tipc: Enabled bearer , priority 0 [ 1309.270571][T19560] syzkaller0: entered promiscuous mode [ 1309.278701][T19560] syzkaller0: entered allmulticast mode [ 1309.363911][T19559] tipc: Resetting bearer [ 1309.377050][T19558] tipc: Resetting bearer [ 1309.438656][T19558] tipc: Disabling bearer [ 1309.705701][T19573] tipc: Started in network mode [ 1309.711406][T19573] tipc: Node identity f69868103908, cluster identity 4711 [ 1309.720239][T19573] tipc: Enabled bearer , priority 0 [ 1309.731113][T19573] netlink: 'syz.1.20001': attribute type 13 has an invalid length. [ 1309.930380][T19576] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1309.939221][T19576] syzkaller0: entered promiscuous mode [ 1309.945191][T19576] syzkaller0: entered allmulticast mode [ 1309.954984][T14103] Bluetooth: hci14: command tx timeout [ 1310.020011][T19573] tipc: Resetting bearer [ 1310.029501][T19572] tipc: Resetting bearer [ 1310.060391][T19572] tipc: Disabling bearer [ 1310.072556][T19583] syzkaller0: entered promiscuous mode [ 1310.079162][T19583] syzkaller0: entered allmulticast mode [ 1310.220631][T19587] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.379027][T19587] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.388169][T19598] netlink: 64 bytes leftover after parsing attributes in process `syz.3.20007'. [ 1310.466294][T19587] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.559752][T19587] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.931454][T19601] lo speed is unknown, defaulting to 1000 [ 1310.939658][T19601] lo speed is unknown, defaulting to 1000 [ 1311.072146][ T1016] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.249660][ T1016] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.273194][ T1016] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.305781][ T1016] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.387394][T19610] netlink: 'syz.3.20012': attribute type 10 has an invalid length. [ 1311.402095][T19610] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20012'. [ 1311.435059][T19610] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1311.471245][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1311.492064][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1312.649988][T19642] lo speed is unknown, defaulting to 1000 [ 1312.657981][T19642] lo speed is unknown, defaulting to 1000 [ 1313.426682][T19655] lo speed is unknown, defaulting to 1000 [ 1313.435366][T19655] lo speed is unknown, defaulting to 1000 [ 1313.443824][T19653] siw: device registration error -23 [ 1313.560639][ T1711] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1313.576292][ T1711] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1313.585892][ T1711] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1313.595968][ T1711] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1313.604651][ T1711] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1313.634378][ T1711] Bluetooth: hci14: command tx timeout [ 1313.743814][T19673] netlink: 76 bytes leftover after parsing attributes in process `syz.1.20027'. [ 1313.800465][T19663] lo speed is unknown, defaulting to 1000 [ 1313.808783][T19663] lo speed is unknown, defaulting to 1000 [ 1314.050105][T19676] syzkaller0: entered promiscuous mode [ 1314.061786][T19676] syzkaller0: entered allmulticast mode [ 1314.073776][T19678] netlink: 'syz.1.20028': attribute type 2 has an invalid length. [ 1314.104114][T19678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20028'. [ 1314.185847][T19669] lo speed is unknown, defaulting to 1000 [ 1314.252055][T19669] lo speed is unknown, defaulting to 1000 [ 1314.687144][T19669] chnl_net:caif_netlink_parms(): no params data found [ 1314.780098][T19686] bridge_slave_0: left allmulticast mode [ 1314.786131][T19686] bridge_slave_0: left promiscuous mode [ 1314.792158][T19686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.809549][T19686] bridge_slave_1: left allmulticast mode [ 1314.816737][T19686] bridge_slave_1: left promiscuous mode [ 1314.822633][T19686] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.894805][T19686] bond0: (slave bond_slave_0): Releasing backup interface [ 1314.947034][T19686] bond0: (slave bond_slave_1): Releasing backup interface [ 1314.962857][T19686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1314.984900][T19686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1315.007606][T19686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1315.020816][T19686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1315.038508][T19686] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1315.096697][T19689] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1315.258043][T19669] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.274311][T19669] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.281907][T19669] bridge_slave_0: entered allmulticast mode [ 1315.290464][T19669] bridge_slave_0: entered promiscuous mode [ 1315.300182][T19669] bridge0: port 2(bridge_slave_1) entered blocking state [ 1315.308053][T19669] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.315915][T19669] bridge_slave_1: entered allmulticast mode [ 1315.325122][T19669] bridge_slave_1: entered promiscuous mode [ 1315.378005][T19669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1315.408733][T19669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1315.539699][T19669] team0: Port device team_slave_0 added [ 1315.561340][T19669] team0: Port device team_slave_1 added [ 1315.642621][T19669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1315.652713][T19669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1315.681370][T19669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1315.704378][T19669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1315.711403][T19669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1315.754254][ T5912] Bluetooth: hci15: command tx timeout [ 1315.757698][T19669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1315.843066][T19669] hsr_slave_0: entered promiscuous mode [ 1315.850726][T19669] hsr_slave_1: entered promiscuous mode [ 1315.858932][T19669] debugfs: 'hsr0' already exists in 'hsr' [ 1315.868836][T19669] Cannot create hsr debugfs directory [ 1316.120991][T19703] syzkaller0: entered promiscuous mode [ 1316.133020][T19703] syzkaller0: entered allmulticast mode [ 1316.569812][T19669] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1316.588014][T19669] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1316.608066][T19708] netlink: 'syz.1.20036': attribute type 1 has an invalid length. [ 1316.651016][T19669] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1316.664521][T19669] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1316.791273][T19669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1316.822608][T19669] 8021q: adding VLAN 0 to HW filter on device team0 [ 1316.838185][T11573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.845475][T11573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1316.873224][T11573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.880409][T11573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1317.045724][T19728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20041'. [ 1317.225847][T19728] team_slave_0: left promiscuous mode [ 1317.236808][T19728] team0 (unregistering): Port device team_slave_0 removed [ 1317.245183][T19728] team_slave_1: left promiscuous mode [ 1317.255482][T19728] team0 (unregistering): Port device team_slave_1 removed [ 1317.400491][T19669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1317.794446][T14103] Bluetooth: hci15: command tx timeout [ 1317.931740][T19752] syzkaller1: entered promiscuous mode [ 1317.949057][T19752] syzkaller1: entered allmulticast mode [ 1317.979714][T19669] veth0_vlan: entered promiscuous mode [ 1318.005860][T19669] veth1_vlan: entered promiscuous mode [ 1318.070066][T19669] veth0_macvtap: entered promiscuous mode [ 1318.087741][T19669] veth1_macvtap: entered promiscuous mode [ 1318.117979][T19669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1318.147160][T19669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1318.172901][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.288283][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.349709][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.391610][T19756] netlink: 'syz.3.20046': attribute type 16 has an invalid length. [ 1318.414429][T19756] netlink: 'syz.3.20046': attribute type 17 has an invalid length. [ 1318.491250][ T3722] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.584466][T19756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1318.684644][ T5912] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1318.716347][T11573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1318.739221][T11573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1318.778160][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1318.787734][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1318.964706][T19764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20026'. [ 1319.336301][T19768] syzkaller0: entered promiscuous mode [ 1319.342607][T19768] syzkaller0: entered allmulticast mode [ 1319.885778][ T5912] Bluetooth: hci15: command tx timeout [ 1321.964432][ T5912] Bluetooth: hci15: command tx timeout [ 1322.009175][T14103] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1322.062328][T14103] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1322.092764][T14103] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1322.104521][T14103] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1322.118656][T14103] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1324.195154][T14103] Bluetooth: hci16: command tx timeout [ 1324.355619][ T6103] IPVS: starting estimator thread 0... [ 1324.458070][T19816] IPVS: using max 27 ests per chain, 64800 per kthread [ 1324.522011][T19796] lo speed is unknown, defaulting to 1000 [ 1324.531462][T19796] lo speed is unknown, defaulting to 1000 [ 1325.380450][T19796] chnl_net:caif_netlink_parms(): no params data found [ 1325.495634][T19811] lo speed is unknown, defaulting to 1000 [ 1325.526139][T19811] lo speed is unknown, defaulting to 1000 [ 1325.528573][T19834] tipc: Enabled bearer , priority 0 [ 1325.588115][T19834] syzkaller0: entered promiscuous mode [ 1325.593640][T19834] syzkaller0: entered allmulticast mode [ 1325.762984][T19834] tipc: Resetting bearer [ 1325.778593][T19833] tipc: Resetting bearer [ 1325.786041][T19840] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20067'. [ 1325.824537][T19833] tipc: Disabling bearer [ 1325.851771][T19814] lo speed is unknown, defaulting to 1000 [ 1325.854686][T19796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.864990][T19796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.873295][T19796] bridge_slave_0: entered allmulticast mode [ 1325.882327][T19796] bridge_slave_0: entered promiscuous mode [ 1325.893888][T19796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.901464][T19796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.921107][T19796] bridge_slave_1: entered allmulticast mode [ 1325.929705][T19796] bridge_slave_1: entered promiscuous mode [ 1325.937734][T19814] lo speed is unknown, defaulting to 1000 [ 1326.185767][T19796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1326.207414][T19846] tipc: Started in network mode [ 1326.212399][T19846] tipc: Node identity 02b72ea268c8, cluster identity 4711 [ 1326.224408][T19846] tipc: Enabled bearer , priority 0 [ 1326.246193][T19796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1326.272006][T19846] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1326.285145][T14103] Bluetooth: hci16: command tx timeout [ 1326.487364][T19796] team0: Port device team_slave_0 added [ 1326.497681][T19846] tipc: Resetting bearer [ 1326.511989][T19796] team0: Port device team_slave_1 added [ 1326.559306][T19845] tipc: Resetting bearer [ 1326.582656][T19845] tipc: Disabling bearer [ 1326.683353][T19796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1326.700934][T19796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1326.737137][T19796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1326.752312][T19796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1326.761221][T19796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1326.789305][T19796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1326.833717][ T3722] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1326.884823][T19796] hsr_slave_0: entered promiscuous mode [ 1326.892345][T19796] hsr_slave_1: entered promiscuous mode [ 1326.901213][T19796] debugfs: 'hsr0' already exists in 'hsr' [ 1326.934178][T19796] Cannot create hsr debugfs directory [ 1327.098262][T19859] syzkaller0: entered promiscuous mode [ 1327.103934][T19859] syzkaller0: entered allmulticast mode [ 1327.351093][T19796] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.461772][T19796] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.572003][T19796] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.738925][T19796] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.354712][T14103] Bluetooth: hci16: command tx timeout [ 1328.516470][T19872] lo speed is unknown, defaulting to 1000 [ 1328.541840][T19796] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1328.570011][T19796] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1328.589236][T19872] lo speed is unknown, defaulting to 1000 [ 1328.589797][T19796] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1328.636164][T19796] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1328.969197][ T5912] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1328.981290][ T5912] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1328.991456][ T5912] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1329.011714][ T5912] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1329.020242][ T5912] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1329.057529][T19796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1329.116183][T19796] 8021q: adding VLAN 0 to HW filter on device team0 [ 1329.147832][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.155181][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1329.196134][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.203400][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1329.437704][T19884] lo speed is unknown, defaulting to 1000 [ 1329.466542][T19884] lo speed is unknown, defaulting to 1000 [ 1329.701796][T19796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1329.849898][T19885] lo speed is unknown, defaulting to 1000 [ 1329.858134][T19885] lo speed is unknown, defaulting to 1000 [ 1330.440581][T14103] Bluetooth: hci16: command tx timeout [ 1330.575808][T19796] veth0_vlan: entered promiscuous mode [ 1330.598165][T19796] veth1_vlan: entered promiscuous mode [ 1330.633333][T19885] chnl_net:caif_netlink_parms(): no params data found [ 1330.743111][T19910] syz_tun: entered allmulticast mode [ 1330.774544][T19796] veth0_macvtap: entered promiscuous mode [ 1330.813429][T19910] netlink: 'syz.1.20081': attribute type 39 has an invalid length. [ 1330.860645][T19796] veth1_macvtap: entered promiscuous mode [ 1330.890170][T19910] syz_tun (unregistering): left allmulticast mode [ 1330.955979][T19885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.963352][T19885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1330.971858][T19885] bridge_slave_0: entered allmulticast mode [ 1330.981148][T19885] bridge_slave_0: entered promiscuous mode [ 1330.995538][T19885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1331.003713][T19885] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.015911][T19885] bridge_slave_1: entered allmulticast mode [ 1331.023834][T19885] bridge_slave_1: entered promiscuous mode [ 1331.072705][T19796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1331.080418][T14103] Bluetooth: hci17: command tx timeout [ 1331.106547][T19885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1331.124652][T19796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1331.141282][T19885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1331.189007][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.198268][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.241147][T19885] team0: Port device team_slave_0 added [ 1331.250060][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.260510][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.281523][T19885] team0: Port device team_slave_1 added [ 1331.369040][T19885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1331.382081][T19885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1331.410552][T19885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1331.453102][T19885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1331.460492][T19885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1331.489995][T19885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1331.509864][T19921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20083'. [ 1331.573082][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1331.598555][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1331.667365][T19885] hsr_slave_0: entered promiscuous mode [ 1331.674662][T19885] hsr_slave_1: entered promiscuous mode [ 1331.681315][T19885] debugfs: 'hsr0' already exists in 'hsr' [ 1331.687544][T19885] Cannot create hsr debugfs directory [ 1331.776204][ T3722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1331.790436][ T3722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1331.866197][T19928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20086'. [ 1332.020497][T19885] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.168353][T19885] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.263045][T19885] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.351658][T19885] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.403103][T19937] lo speed is unknown, defaulting to 1000 [ 1332.412617][T19937] lo speed is unknown, defaulting to 1000 [ 1332.609985][T19885] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1332.623112][T19885] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1332.638594][T19885] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1332.656163][T19885] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1332.794558][T19951] geneve2: entered promiscuous mode [ 1332.813674][T19951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20090'. [ 1332.870226][T19885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1332.891327][T19953] netlink: 'syz.5.20091': attribute type 9 has an invalid length. [ 1332.905817][T19953] netlink: 'syz.5.20091': attribute type 6 has an invalid length. [ 1332.920303][T19885] 8021q: adding VLAN 0 to HW filter on device team0 [ 1332.952199][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.959459][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1332.997059][T11573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.004290][T11573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1333.155006][T14103] Bluetooth: hci17: command tx timeout [ 1333.229555][ T9] IPVS: starting estimator thread 0... [ 1333.326879][T19959] IPVS: using max 26 ests per chain, 62400 per kthread [ 1333.355550][T19962] netlink: 'syz.5.20094': attribute type 4 has an invalid length. [ 1333.491404][T19966] syzkaller0: entered promiscuous mode [ 1333.497833][T19966] syzkaller0: entered allmulticast mode [ 1333.537279][T19885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1334.138985][T19885] veth0_vlan: entered promiscuous mode [ 1334.171379][T19885] veth1_vlan: entered promiscuous mode [ 1334.245311][T19885] veth0_macvtap: entered promiscuous mode [ 1334.272053][T19985] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20097'. [ 1334.288678][T19885] veth1_macvtap: entered promiscuous mode [ 1334.331225][T19885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1334.496282][T19885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1334.563535][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.618310][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.748083][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.761601][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.810894][T19978] lo speed is unknown, defaulting to 1000 [ 1334.985211][T19978] lo speed is unknown, defaulting to 1000 [ 1335.091712][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1335.114336][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1335.223057][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1335.231592][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1335.241498][T14103] Bluetooth: hci17: command tx timeout [ 1336.299620][T19999] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1336.383145][T20001] netlink: 'syz.5.20103': attribute type 1 has an invalid length. [ 1336.454933][T20004] netlink: 28 bytes leftover after parsing attributes in process `syz.5.20103'. [ 1336.565635][T20004] macvlan2: entered promiscuous mode [ 1336.574473][T20004] macvlan2: entered allmulticast mode [ 1336.613204][T20007] netlink: 'syz.7.20104': attribute type 1 has an invalid length. [ 1337.308144][T20009] lo speed is unknown, defaulting to 1000 [ 1337.314255][T14103] Bluetooth: hci17: command tx timeout [ 1337.326099][T20009] lo speed is unknown, defaulting to 1000 [ 1337.680484][T20020] netlink: 'syz.5.20107': attribute type 10 has an invalid length. [ 1338.294416][T20023] lo speed is unknown, defaulting to 1000 [ 1338.302697][T20023] lo speed is unknown, defaulting to 1000 [ 1339.394328][T14103] Bluetooth: hci17: command tx timeout [ 1339.734855][T20034] netlink: 'syz.7.20111': attribute type 1 has an invalid length. [ 1339.900508][ T5912] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1339.912750][ T5912] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1339.925976][ T5912] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1339.937115][ T5912] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1339.949976][ T5912] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1340.720081][T20049] syzkaller0: entered promiscuous mode [ 1340.736504][T20049] syzkaller0: entered allmulticast mode [ 1340.817826][T20049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.833099][T20039] lo speed is unknown, defaulting to 1000 [ 1340.844663][T20039] lo speed is unknown, defaulting to 1000 [ 1341.281631][T20039] chnl_net:caif_netlink_parms(): no params data found [ 1341.525200][T20039] bridge0: port 1(bridge_slave_0) entered blocking state [ 1341.533699][T20039] bridge0: port 1(bridge_slave_0) entered disabled state [ 1341.544752][T20039] bridge_slave_0: entered allmulticast mode [ 1341.552996][T20039] bridge_slave_0: entered promiscuous mode [ 1341.562679][T20066] syzkaller0: entered promiscuous mode [ 1341.568913][T20066] syzkaller0: entered allmulticast mode [ 1341.581813][T20039] bridge0: port 2(bridge_slave_1) entered blocking state [ 1341.589366][T20039] bridge0: port 2(bridge_slave_1) entered disabled state [ 1341.597015][T20039] bridge_slave_1: entered allmulticast mode [ 1341.605287][T20039] bridge_slave_1: entered promiscuous mode [ 1341.705692][T20039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1341.736423][T20039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1341.854922][T20039] team0: Port device team_slave_0 added [ 1341.869413][T20039] team0: Port device team_slave_1 added [ 1342.007939][T20039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1342.015450][T20039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1342.042346][ T5912] Bluetooth: hci18: command tx timeout [ 1342.051954][T20039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1342.073090][T20039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1342.080258][T20039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1342.110508][T20039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1342.182487][T20079] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20126'. [ 1342.209452][T20039] hsr_slave_0: entered promiscuous mode [ 1342.227829][T20039] hsr_slave_1: entered promiscuous mode [ 1342.236169][T20039] debugfs: 'hsr0' already exists in 'hsr' [ 1342.246194][T20039] Cannot create hsr debugfs directory [ 1342.255533][T20084] netlink: 60 bytes leftover after parsing attributes in process `syz.5.20127'. [ 1342.297340][T20084] netlink: 96 bytes leftover after parsing attributes in process `syz.5.20127'. [ 1343.046859][T20039] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.089139][T20090] lo speed is unknown, defaulting to 1000 [ 1343.117675][T20090] lo speed is unknown, defaulting to 1000 [ 1343.238393][T20039] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.397425][T20039] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.536182][T20039] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.572776][T20100] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1343.581736][T20100] syzkaller0: entered promiscuous mode [ 1343.583746][ T5912] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1343.587420][T20100] syzkaller0: entered allmulticast mode [ 1343.612269][ T5912] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1343.622292][ T5912] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1343.632418][ T5912] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1343.641155][ T5912] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1343.803040][T20039] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1343.828617][T20039] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1343.852810][T20039] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1343.886840][T20039] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1343.896699][T20105] netlink: 44 bytes leftover after parsing attributes in process `syz.5.20132'. [ 1343.906068][T20105] netlink: 35 bytes leftover after parsing attributes in process `syz.5.20132'. [ 1343.921448][T20105] netlink: 'syz.5.20132': attribute type 6 has an invalid length. [ 1343.929646][T20105] netlink: 'syz.5.20132': attribute type 5 has an invalid length. [ 1343.937992][T20105] netlink: 35 bytes leftover after parsing attributes in process `syz.5.20132'. [ 1343.979782][T20105] netlink: 'syz.5.20132': attribute type 4 has an invalid length. [ 1344.041823][T20105] netlink: 'syz.5.20132': attribute type 4 has an invalid length. [ 1344.052772][T20102] lo speed is unknown, defaulting to 1000 [ 1344.061045][T20102] lo speed is unknown, defaulting to 1000 [ 1344.114730][T14103] Bluetooth: hci18: command tx timeout [ 1344.159633][T20039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1344.216729][T20039] 8021q: adding VLAN 0 to HW filter on device team0 [ 1344.238096][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1344.245339][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1344.292180][T29187] bridge0: port 2(bridge_slave_1) entered blocking state [ 1344.299429][T29187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1344.447119][T20102] chnl_net:caif_netlink_parms(): no params data found [ 1344.692244][T20102] bridge0: port 1(bridge_slave_0) entered blocking state [ 1344.699893][T20102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.707701][T20102] bridge_slave_0: entered allmulticast mode [ 1344.720720][T20102] bridge_slave_0: entered promiscuous mode [ 1344.731618][T20102] bridge0: port 2(bridge_slave_1) entered blocking state [ 1344.742194][T20102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.750265][T20102] bridge_slave_1: entered allmulticast mode [ 1344.759485][T20102] bridge_slave_1: entered promiscuous mode [ 1344.830495][T20102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1344.853857][T20102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1344.900841][T20102] team0: Port device team_slave_0 added [ 1344.911135][T20102] team0: Port device team_slave_1 added [ 1344.969782][T20102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1344.977674][T20102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1345.007906][T20102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1345.021485][T20102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1345.028729][T20102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1345.055496][T20102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1345.122579][T20102] hsr_slave_0: entered promiscuous mode [ 1345.130347][T20102] hsr_slave_1: entered promiscuous mode [ 1345.137043][T20102] debugfs: 'hsr0' already exists in 'hsr' [ 1345.143901][T20102] Cannot create hsr debugfs directory [ 1345.255960][T20039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1345.387642][T20102] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 1345.480600][T20102] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 1345.513593][T20138] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20136'. [ 1345.522965][T20138] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20136'. [ 1345.582446][T20102] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 1345.697106][T20102] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 1345.717908][T14103] Bluetooth: hci19: command tx timeout [ 1345.761023][T20039] veth0_vlan: entered promiscuous mode [ 1345.780578][T20039] veth1_vlan: entered promiscuous mode [ 1345.833929][T20039] veth0_macvtap: entered promiscuous mode [ 1345.850220][T20039] veth1_macvtap: entered promiscuous mode [ 1345.893113][T20039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1345.913436][T20039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1345.987959][ T3722] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.029111][ T3722] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.041877][ T3722] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.077832][ T3722] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.092709][T20102] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1346.140857][T20102] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1346.188945][T20102] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1346.198026][T14103] Bluetooth: hci18: command tx timeout [ 1346.227040][T20102] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1346.260580][T29187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1346.279284][T29187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1346.363511][T11573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1346.376713][T11573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1346.539079][T20102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1346.565311][T20102] 8021q: adding VLAN 0 to HW filter on device team0 [ 1346.597759][T11573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.605016][T11573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1346.620812][T11573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.628089][T11573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1347.042109][T20155] lo speed is unknown, defaulting to 1000 [ 1347.050222][T20155] lo speed is unknown, defaulting to 1000 [ 1347.223047][T20102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1347.348005][T20168] netlink: 12 bytes leftover after parsing attributes in process `syz.9.20141'. [ 1347.371237][ T36] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1347.380681][ T36] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1347.392203][T20168] netlink: 12 bytes leftover after parsing attributes in process `syz.9.20141'. [ 1347.414272][ T36] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1347.435838][ T36] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1347.458010][T20170] netlink: 12 bytes leftover after parsing attributes in process `syz.9.20141'. [ 1347.476077][T20170] netlink: 12 bytes leftover after parsing attributes in process `syz.9.20141'. [ 1347.799047][ T1711] Bluetooth: hci19: command tx timeout [ 1348.006103][T20102] veth0_vlan: entered promiscuous mode [ 1348.039944][T20102] veth1_vlan: entered promiscuous mode [ 1348.063428][T20165] lo speed is unknown, defaulting to 1000 [ 1348.076450][T20165] lo speed is unknown, defaulting to 1000 [ 1348.130274][T20102] veth0_macvtap: entered promiscuous mode [ 1348.169224][T20182] netlink: 8 bytes leftover after parsing attributes in process `syz.9.20143'. [ 1348.169385][T20102] veth1_macvtap: entered promiscuous mode [ 1348.275710][ T1711] Bluetooth: hci18: command tx timeout [ 1348.378266][T20102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1348.415210][T20102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1348.461522][ T3722] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.487659][ T3722] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.520094][ T3722] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.558756][ T3722] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.594473][ T1711] Bluetooth: hci5: command 0x0406 tx timeout [ 1348.761934][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1348.789511][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1348.913492][ T3722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1348.927667][ T3722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1349.876936][ T5912] Bluetooth: hci19: command tx timeout [ 1349.901106][ T5912] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 1349.922245][ T5912] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 1349.931714][ T5912] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 1349.952523][ T5912] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 1349.977155][ T5912] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 1349.991427][T20207] netlink: 'syz.9.20148': attribute type 1 has an invalid length. [ 1350.213268][T20208] veth3: entered promiscuous mode [ 1350.272145][T20212] 8021q: VLANs not supported on vxcan0 [ 1350.345603][T20207] erspan0: entered allmulticast mode [ 1350.414502][T20213] tipc: Started in network mode [ 1350.419563][T20213] tipc: Node identity 7a8b4e827d29, cluster identity 4711 [ 1350.429192][T20213] tipc: Enabled bearer , priority 0 [ 1350.461661][T20210] syzkaller0: entered promiscuous mode [ 1350.505251][T20210] syzkaller0: entered allmulticast mode [ 1350.539515][T20211] tipc: Resetting bearer [ 1350.571458][T20209] tipc: Resetting bearer [ 1350.626341][T20209] tipc: Disabling bearer [ 1350.648832][T20215] syzkaller0: entered promiscuous mode [ 1350.655079][T20215] syzkaller0: entered allmulticast mode [ 1350.861215][T20204] lo speed is unknown, defaulting to 1000 [ 1350.862920][T20218] syzkaller0: entered promiscuous mode [ 1350.872890][T20218] syzkaller0: entered allmulticast mode [ 1350.905177][T20204] lo speed is unknown, defaulting to 1000 [ 1351.357874][T20204] chnl_net:caif_netlink_parms(): no params data found [ 1351.382061][T20220] lo speed is unknown, defaulting to 1000 [ 1351.430080][T20220] lo speed is unknown, defaulting to 1000 [ 1351.466084][T20230] netlink: zone id is out of range [ 1351.471359][T20230] netlink: zone id is out of range [ 1351.482002][T20230] netlink: zone id is out of range [ 1351.489326][T20230] netlink: zone id is out of range [ 1351.498427][T20230] netlink: get zone limit has 4 unknown bytes [ 1351.778994][T20204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.808737][T20204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.837739][T20204] bridge_slave_0: entered allmulticast mode [ 1351.869812][T20204] bridge_slave_0: entered promiscuous mode [ 1351.936398][T20204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.943717][T20204] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.955960][ T5912] Bluetooth: hci19: command tx timeout [ 1351.979571][T20204] bridge_slave_1: entered allmulticast mode [ 1351.997157][T20204] bridge_slave_1: entered promiscuous mode [ 1352.036022][ T5912] Bluetooth: hci20: command tx timeout [ 1352.248786][T20204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1352.288475][T20204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1352.398626][T20204] team0: Port device team_slave_0 added [ 1352.418330][T20204] team0: Port device team_slave_1 added [ 1352.499880][T20204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1352.509600][T20204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1352.546514][T20204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1352.561140][T20204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1352.569048][T20204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1352.601852][T20204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1352.699755][T20204] hsr_slave_0: entered promiscuous mode [ 1352.725910][T20204] hsr_slave_1: entered promiscuous mode [ 1352.743340][T20204] debugfs: 'hsr0' already exists in 'hsr' [ 1352.774591][T20204] Cannot create hsr debugfs directory [ 1353.141891][T20204] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.340446][T20204] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.360638][T20253] tipc: Enabled bearer , priority 0 [ 1353.368362][T20247] syzkaller0: entered promiscuous mode [ 1353.373878][T20247] syzkaller0: entered allmulticast mode [ 1353.426478][T20204] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.445214][T20245] tipc: Resetting bearer [ 1353.469333][T20245] tipc: Disabling bearer [ 1353.509112][T20204] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.752770][T20204] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1353.776513][T20204] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1353.814643][T20204] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1353.835603][T20204] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1353.952779][T20256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1353.980426][T20254] lo speed is unknown, defaulting to 1000 [ 1353.993509][T20254] lo speed is unknown, defaulting to 1000 [ 1354.077959][T20256] netlink: 'syz.8.20159': attribute type 5 has an invalid length. [ 1354.115933][ T5912] Bluetooth: hci20: command 0x041b tx timeout [ 1354.175584][T20204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1354.275092][T20204] 8021q: adding VLAN 0 to HW filter on device team0 [ 1354.302041][ T3722] bridge0: port 1(bridge_slave_0) entered blocking state [ 1354.309297][ T3722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1354.337858][T11573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1354.345099][T11573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1354.421548][T20204] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1354.676468][T20204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1354.753410][T20204] veth0_vlan: entered promiscuous mode [ 1354.777654][T20204] veth1_vlan: entered promiscuous mode [ 1354.795150][T20268] lo speed is unknown, defaulting to 1000 [ 1354.803360][T20268] lo speed is unknown, defaulting to 1000 [ 1354.858523][T20204] veth0_macvtap: entered promiscuous mode [ 1354.878252][T20204] veth1_macvtap: entered promiscuous mode [ 1354.931664][T20204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1354.950480][T20204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1354.966844][T29187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.977344][T29187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.002983][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.012077][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.121661][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1355.143724][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1355.202019][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1355.212220][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1355.427386][ T3738] IPVS: starting estimator thread 0... [ 1355.437129][T20285] netlink: 'syz.8.20164': attribute type 1 has an invalid length. [ 1355.512736][T20287] vlan2: entered allmulticast mode [ 1355.519887][T20287] batadv_slave_1: entered allmulticast mode [ 1355.524195][T20286] IPVS: using max 25 ests per chain, 60000 per kthread [ 1356.013186][T20294] netlink: 8 bytes leftover after parsing attributes in process `syz.8.20166'. [ 1356.202903][T14103] Bluetooth: hci20: command 0x041b tx timeout [ 1357.992951][ T5912] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 1358.005407][ T5912] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 1358.018558][ T5912] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 1358.027244][ T5912] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 1358.041221][ T5912] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 1358.167506][T20303] netlink: 'syz.2.20169': attribute type 13 has an invalid length. [ 1358.276044][T14103] Bluetooth: hci20: command 0x041b tx timeout [ 1358.460258][T20300] lo speed is unknown, defaulting to 1000 [ 1358.473908][T20300] lo speed is unknown, defaulting to 1000 [ 1358.680510][T20314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20172'. [ 1358.709717][T20314] bridge_slave_1: left allmulticast mode [ 1358.716572][T20314] bridge_slave_1: left promiscuous mode [ 1358.722411][T20314] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.737493][T20314] bridge_slave_0: left allmulticast mode [ 1358.743209][T20314] bridge_slave_0: left promiscuous mode [ 1358.749611][T20314] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.994708][T20300] chnl_net:caif_netlink_parms(): no params data found [ 1359.050025][T20319] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.20173'. [ 1359.137918][T20300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1359.145859][T20300] bridge0: port 1(bridge_slave_0) entered disabled state [ 1359.153288][T20300] bridge_slave_0: entered allmulticast mode [ 1359.166184][T20300] bridge_slave_0: entered promiscuous mode [ 1359.176749][T20300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1359.184265][T20300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1359.191720][T20300] bridge_slave_1: entered allmulticast mode [ 1359.200713][T20300] bridge_slave_1: entered promiscuous mode [ 1359.252894][T20300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1359.269998][T20300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1359.324736][T20300] team0: Port device team_slave_0 added [ 1359.335209][T20300] team0: Port device team_slave_1 added [ 1359.381621][T20300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1359.389022][T20300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1359.418356][T20300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1359.435507][T20300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1359.442589][T20300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1359.473119][T20300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1359.562621][T20300] hsr_slave_0: entered promiscuous mode [ 1359.571389][T20300] hsr_slave_1: entered promiscuous mode [ 1359.581814][T20300] debugfs: 'hsr0' already exists in 'hsr' [ 1359.589080][T20300] Cannot create hsr debugfs directory [ 1359.929057][T20330] netlink: 'syz.2.20176': attribute type 2 has an invalid length. [ 1359.937454][T20330] netlink: 'syz.2.20176': attribute type 1 has an invalid length. [ 1359.945815][T20330] netlink: 'syz.2.20176': attribute type 2 has an invalid length. [ 1359.953863][T20330] netlink: 'syz.2.20176': attribute type 11 has an invalid length. [ 1359.977944][T20330] netlink: 76 bytes leftover after parsing attributes in process `syz.2.20176'. [ 1359.995966][T20330] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20176'. [ 1360.005752][T20330] netlink: 32 bytes leftover after parsing attributes in process `syz.2.20176'. [ 1360.120655][T14103] Bluetooth: hci21: command tx timeout [ 1360.326471][T20300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1360.340592][T20300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1360.355602][T20300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1360.362404][T14103] Bluetooth: hci20: command 0x041b tx timeout [ 1360.376834][T20300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1360.463311][T20333] lo speed is unknown, defaulting to 1000 [ 1360.537506][T20333] lo speed is unknown, defaulting to 1000 [ 1360.552641][T20300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1360.666052][T20300] 8021q: adding VLAN 0 to HW filter on device team0 [ 1360.691968][T11573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.699262][T11573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1360.720851][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1360.728097][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1361.066265][T20300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1361.149700][T20300] veth0_vlan: entered promiscuous mode [ 1361.180094][T20300] veth1_vlan: entered promiscuous mode [ 1361.316416][T20300] veth0_macvtap: entered promiscuous mode [ 1361.330398][T20300] veth1_macvtap: entered promiscuous mode [ 1361.362868][T20300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1361.390389][T20300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1361.419272][T29187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.429528][T29187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.449882][T29187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.475250][T29187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.662017][ T3722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1361.684132][ T3722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1361.746762][T20354] tipc: Enabled bearer , priority 0 [ 1361.756954][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1361.759787][T20354] syzkaller0: entered promiscuous mode [ 1361.771094][T20354] syzkaller0: entered allmulticast mode [ 1361.776438][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1361.938692][T20354] tipc: Resetting bearer [ 1361.983395][T20353] tipc: Resetting bearer [ 1362.042934][T20353] tipc: Disabling bearer [ 1362.195273][ T1711] Bluetooth: hci21: command tx timeout [ 1362.431116][T20376] tipc: Started in network mode [ 1362.438654][T20376] tipc: Node identity 4, cluster identity 4711 [ 1362.445410][T20376] tipc: Node number set to 4 [ 1362.722248][ T5912] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1 [ 1362.735479][ T5912] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9 [ 1362.745224][ T5912] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9 [ 1362.758513][ T5912] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4 [ 1362.767693][ T5912] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2 [ 1362.865107][T20375] lo speed is unknown, defaulting to 1000 [ 1362.893454][T20375] lo speed is unknown, defaulting to 1000 [ 1363.272461][T20381] lo speed is unknown, defaulting to 1000 [ 1363.280680][T20381] lo speed is unknown, defaulting to 1000 [ 1363.575412][T20381] chnl_net:caif_netlink_parms(): no params data found [ 1363.663075][T20394] netlink: 64 bytes leftover after parsing attributes in process `syz.8.20189'. [ 1363.727459][T20381] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.734852][T20381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1363.742616][T20381] bridge_slave_0: entered allmulticast mode [ 1363.755461][T20381] bridge_slave_0: entered promiscuous mode [ 1363.766072][T20381] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.773362][T20381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.782234][T20381] bridge_slave_1: entered allmulticast mode [ 1363.791262][T20381] bridge_slave_1: entered promiscuous mode [ 1363.860389][T20381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1363.878279][T20381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1363.929353][T20381] team0: Port device team_slave_0 added [ 1363.944927][T20381] team0: Port device team_slave_1 added [ 1363.954287][ T5912] Bluetooth: hci6: command 0x0406 tx timeout [ 1364.032432][T20401] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1364.142799][T20381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1364.151050][T20381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1364.177642][T20381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1364.203726][T20381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1364.211268][T20381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1364.224486][T20404] netlink: 'syz.0.20191': attribute type 23 has an invalid length. [ 1364.240567][T20381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1364.257318][T20405] netlink: 244 bytes leftover after parsing attributes in process `syz.0.20191'. [ 1364.274574][T14103] Bluetooth: hci21: command tx timeout [ 1364.368500][T20381] hsr_slave_0: entered promiscuous mode [ 1364.377515][T20381] hsr_slave_1: entered promiscuous mode [ 1364.385839][T20381] debugfs: 'hsr0' already exists in 'hsr' [ 1364.391627][T20381] Cannot create hsr debugfs directory [ 1364.586960][T20381] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.665895][T20381] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.753659][T20381] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.840046][T14103] Bluetooth: hci22: command tx timeout [ 1364.857685][T20381] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.919990][T20414] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001 [ 1364.942565][T20414] netlink: 12 bytes leftover after parsing attributes in process `syz.8.20194'. [ 1365.136617][T20417] netlink: 8 bytes leftover after parsing attributes in process `syz.8.20195'. [ 1365.151621][T20381] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1365.174748][T20381] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1365.191614][T20381] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1365.207439][T20381] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1365.421126][T20381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1365.480586][T20381] 8021q: adding VLAN 0 to HW filter on device team0 [ 1365.503640][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.510914][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1365.637675][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.644885][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1365.745993][T20426] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.20196'. [ 1366.085761][T20431] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1366.137655][T20381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1366.159965][T20431] netlink: 'syz.0.20197': attribute type 4 has an invalid length. [ 1366.358543][T14103] Bluetooth: hci21: command tx timeout [ 1366.585970][T20447] siw: device registration error -23 [ 1366.617377][T20448] netlink: 4 bytes leftover after parsing attributes in process `syz.8.20201'. [ 1366.669736][T20381] veth0_vlan: entered promiscuous mode [ 1366.706440][T20381] veth1_vlan: entered promiscuous mode [ 1366.782570][T20381] veth0_macvtap: entered promiscuous mode [ 1366.816324][T20381] veth1_macvtap: entered promiscuous mode [ 1366.871127][T20381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1366.893186][T20381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1366.921173][T14103] Bluetooth: hci22: command tx timeout [ 1366.966755][T20451] netlink: 'syz.0.20202': attribute type 2 has an invalid length. [ 1366.982734][T20451] netlink: 'syz.0.20202': attribute type 5 has an invalid length. [ 1366.991675][T11573] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.112032][T11573] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.125076][T11573] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.144665][T11573] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.299986][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1367.344298][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1367.406329][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1367.416137][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1367.570093][T20459] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20182'. [ 1367.621800][T20459] bridge_slave_1: left allmulticast mode [ 1367.659479][T20459] bridge_slave_1: left promiscuous mode [ 1367.670431][T20459] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.689272][T20459] bridge_slave_0: left allmulticast mode [ 1367.715315][T20459] bridge_slave_0: left promiscuous mode [ 1367.721215][T20459] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.904709][T20465] netlink: 'syz.8.20205': attribute type 1 has an invalid length. [ 1367.985704][T20465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1368.022195][T20468] bond1: (slave ip6gretap1): making interface the new active one [ 1368.039659][T20468] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1368.081291][T20465] veth3: entered promiscuous mode [ 1368.090949][T20465] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1368.127514][T20465] erspan0: entered allmulticast mode [ 1368.141782][T20465] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 1368.180477][T20465] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1368.448991][ T5912] Bluetooth: hci21: command tx timeout [ 1368.699758][T20479] netlink: 584 bytes leftover after parsing attributes in process `syz.8.20208'. [ 1368.805706][ T1711] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1 [ 1368.818791][ T1711] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9 [ 1368.828031][ T1711] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9 [ 1368.837515][ T1711] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4 [ 1368.845798][ T1711] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2 [ 1368.995688][ T1711] Bluetooth: hci22: command tx timeout [ 1369.074346][ T1711] Bluetooth: hci7: command 0x0406 tx timeout [ 1369.549812][T20491] wg1: entered promiscuous mode [ 1369.576726][T20491] wg1: entered allmulticast mode [ 1369.654071][T20488] xt_CT: No such helper "netbios-ns" [ 1370.013627][T20485] lo speed is unknown, defaulting to 1000 [ 1370.021545][T20485] lo speed is unknown, defaulting to 1000 [ 1370.102045][T20481] lo speed is unknown, defaulting to 1000 [ 1370.231242][T20481] lo speed is unknown, defaulting to 1000 [ 1370.400231][T20497] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1370.487868][T20499] pim6reg1: entered promiscuous mode [ 1370.493226][T20499] pim6reg1: entered allmulticast mode [ 1370.700144][T20481] chnl_net:caif_netlink_parms(): no params data found [ 1370.917104][T14103] Bluetooth: hci23: command tx timeout [ 1370.961595][T20481] bridge0: port 1(bridge_slave_0) entered blocking state [ 1370.974306][T20481] bridge0: port 1(bridge_slave_0) entered disabled state [ 1370.982324][T20481] bridge_slave_0: entered allmulticast mode [ 1371.006697][T20481] bridge_slave_0: entered promiscuous mode [ 1371.018471][T20481] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.026161][T20481] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.033762][T20481] bridge_slave_1: entered allmulticast mode [ 1371.045348][T20481] bridge_slave_1: entered promiscuous mode [ 1371.075397][T14103] Bluetooth: hci22: command tx timeout [ 1371.141893][T20481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1371.156087][T20516] netlink: 'syz.8.20216': attribute type 4 has an invalid length. [ 1371.162125][T20481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1371.273619][T20481] team0: Port device team_slave_0 added [ 1371.302830][T20481] team0: Port device team_slave_1 added [ 1371.375310][T20481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1371.382607][T20481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1371.415233][T20481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1371.429549][T20481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1371.437023][T20481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1371.464340][T20481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1371.589038][T20520] netlink: 1372 bytes leftover after parsing attributes in process `syz.8.20218'. [ 1371.592434][T20481] hsr_slave_0: entered promiscuous mode [ 1371.608600][T20481] hsr_slave_1: entered promiscuous mode [ 1371.615954][T20481] debugfs: 'hsr0' already exists in 'hsr' [ 1371.621852][T20481] Cannot create hsr debugfs directory [ 1372.288895][ T9] IPVS: starting estimator thread 0... [ 1372.293897][T20534] IPVS: nq: FWM 3 0x00000003 - no destination available [ 1372.357736][T20534] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1372.384266][T20535] IPVS: using max 25 ests per chain, 60000 per kthread [ 1372.858044][T20481] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.930500][T20545] netlink: 416 bytes leftover after parsing attributes in process `syz.8.20226'. [ 1372.997914][ T1711] Bluetooth: hci23: command tx timeout [ 1373.026807][T20481] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.046355][T20546] netlink: 20 bytes leftover after parsing attributes in process `syz.8.20226'. [ 1373.090547][T20548] netlink: 32 bytes leftover after parsing attributes in process `syz.0.20227'. [ 1373.142443][T20481] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.211646][T20551] netlink: 4 bytes leftover after parsing attributes in process `syz.8.20228'. [ 1373.286781][T20481] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.381886][T20551] team_slave_0: entered promiscuous mode [ 1373.388040][T20551] team_slave_1: entered promiscuous mode [ 1373.408410][T20551] macvtap1: entered promiscuous mode [ 1373.413783][T20551] team0: entered promiscuous mode [ 1373.420138][T20551] macvtap1: entered allmulticast mode [ 1373.442428][T20551] team0: entered allmulticast mode [ 1373.448997][T20551] team_slave_0: entered allmulticast mode [ 1373.456286][T20551] team_slave_1: entered allmulticast mode [ 1373.466930][T20551] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1373.487568][T20552] macvtap1: left promiscuous mode [ 1373.492963][T20552] team0: left promiscuous mode [ 1373.498636][T20552] macvtap1: left allmulticast mode [ 1373.504329][T20552] team0: left allmulticast mode [ 1373.510033][T20552] team_slave_0: left allmulticast mode [ 1373.516020][T20552] team_slave_1: left allmulticast mode [ 1373.789028][T20564] netlink: 4 bytes leftover after parsing attributes in process `syz.8.20231'. [ 1373.884652][T20564] bridge_slave_1: left allmulticast mode [ 1373.890682][T20564] bridge_slave_1: left promiscuous mode [ 1373.900726][T20564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.921287][T20564] bridge_slave_0: left allmulticast mode [ 1373.946974][T20564] bridge_slave_0: left promiscuous mode [ 1373.964943][T20564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.198594][ T1711] Bluetooth: hci8: command 0x0406 tx timeout [ 1374.550098][T20481] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1374.575902][T20481] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1374.613683][T20481] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1374.633684][T20481] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1374.889696][T20481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1374.931161][T20481] 8021q: adding VLAN 0 to HW filter on device team0 [ 1374.950078][T11573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.957352][T11573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1374.988103][T20583] vlan2: entered promiscuous mode [ 1374.993529][T20583] vlan2: entered allmulticast mode [ 1375.024610][T20583] hsr_slave_1: entered allmulticast mode [ 1375.049429][T11573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.056838][T11573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1375.080560][T14103] Bluetooth: hci23: command tx timeout [ 1375.231452][T20583] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20236'. [ 1375.320961][ T31] INFO: task kworker/u8:9:10999 blocked for more than 143 seconds. [ 1375.329649][ T31] Not tainted syzkaller #0 [ 1375.335597][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1375.348395][ T31] task:kworker/u8:9 state:D stack:24272 pid:10999 tgid:10999 ppid:2 task_flags:0x4208060 flags:0x00080000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1375.375673][ T31] Workqueue: netns cleanup_net [ 1375.387326][ T31] Call Trace: [ 1375.395560][ T31] [ 1375.405076][ T31] __schedule+0x1798/0x4cc0 [ 1375.417863][ T31] ? __lock_acquire+0xab9/0xd20 [ 1375.428196][ T31] ? __lock_acquire+0xab9/0xd20 [ 1375.701221][ T31] ? __pfx___schedule+0x10/0x10 [ 1375.721023][ T31] ? schedule+0x91/0x360 [ 1375.750235][ T31] schedule+0x165/0x360 [ 1375.777326][ T31] schedule_preempt_disabled+0x13/0x30 [ 1375.782880][ T31] __mutex_lock+0x7e6/0x1350 [ 1375.816977][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1375.821949][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 1375.851542][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1375.877228][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1375.904676][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1375.910904][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1375.927768][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1375.933231][ T31] rdma_dev_change_netns+0x39/0x300 [ 1375.938651][ T31] rdma_dev_exit_net+0x203/0x340 [ 1375.943645][ T31] ? __pfx___might_resched+0x10/0x10 [ 1375.949603][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 1375.959420][ T31] ? net_generic+0x1e/0x240 [ 1375.964362][ T31] ? mutex_is_locked+0x17/0x50 [ 1375.969333][ T31] ? rtnl_is_locked+0x15/0x20 [ 1375.989126][ T31] ops_undo_list+0x49a/0x990 [ 1375.993815][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1375.999179][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1376.015311][ T31] cleanup_net+0x4d8/0x820 [ 1376.019815][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1376.037302][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1376.043848][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1376.064324][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1376.070135][ T31] process_scheduled_works+0xae1/0x17b0 [ 1376.110350][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1376.154143][ T31] worker_thread+0x8a0/0xda0 [ 1376.177843][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1376.200687][ T31] ? __kthread_parkme+0x7b/0x200 [ 1376.207121][ T31] kthread+0x711/0x8a0 [ 1376.211271][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1376.224058][ T31] ? __pfx_kthread+0x10/0x10 [ 1376.228741][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1376.235412][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1376.240675][ T31] ? __pfx_kthread+0x10/0x10 [ 1376.247905][ T31] ret_from_fork+0x4bc/0x870 [ 1376.252567][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1376.259062][ T31] ? __switch_to_asm+0x39/0x70 [ 1376.263867][ T31] ? __switch_to_asm+0x33/0x70 [ 1376.268936][ T31] ? __pfx_kthread+0x10/0x10 [ 1376.273582][ T31] ret_from_fork_asm+0x1a/0x30 [ 1376.281478][ T31] [ 1376.294468][ T31] INFO: task syz.2.19566:17878 blocked for more than 144 seconds. [ 1376.302339][ T31] Not tainted syzkaller #0 [ 1376.318946][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1376.327815][ T31] task:syz.2.19566 state:D stack:23296 pid:17878 tgid:17877 ppid:1708 task_flags:0x400140 flags:0x00080003 [ 1376.339962][ T31] Call Trace: [ 1376.343285][ T31] [ 1376.346410][ T31] __schedule+0x1798/0x4cc0 [ 1376.350974][ T31] ? __lock_acquire+0xab9/0xd20 [ 1376.356185][ T31] ? __lock_acquire+0xab9/0xd20 [ 1376.361089][ T31] ? __pfx___schedule+0x10/0x10 [ 1376.374520][ T31] ? schedule+0x91/0x360 [ 1376.378855][ T31] schedule+0x165/0x360 [ 1376.383050][ T31] schedule_preempt_disabled+0x13/0x30 [ 1376.388664][ T31] __mutex_lock+0x7e6/0x1350 [ 1376.393307][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1376.399909][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 1376.405442][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1376.410520][ T31] ? kobject_put+0x270/0x480 [ 1376.415481][ T31] ? kfree+0x19a/0x6d0 [ 1376.419618][ T31] rdma_dev_change_netns+0x39/0x300 [ 1376.425012][ T31] rdma_dev_exit_net+0x203/0x340 [ 1376.430002][ T31] ? __pfx___might_resched+0x10/0x10 [ 1376.436583][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 1376.442105][ T31] ? net_generic+0x1e/0x240 [ 1376.446858][ T31] ? mutex_is_locked+0x17/0x50 [ 1376.451680][ T31] ? rtnl_is_locked+0x15/0x20 [ 1376.456562][ T31] ops_undo_list+0x49a/0x990 [ 1376.461207][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1376.466630][ T31] ? ops_init+0x469/0x5c0 [ 1376.471016][ T31] setup_net+0x2d6/0x320 [ 1376.475588][ T31] ? __pfx_setup_net+0x10/0x10 [ 1376.480391][ T31] ? copy_net_ns+0x337/0x4e0 [ 1376.485256][ T31] ? down_read_killable+0x1d1/0x350 [ 1376.490508][ T31] ? preinit_net+0x47d/0x780 [ 1376.495305][ T31] copy_net_ns+0x34e/0x4e0 [ 1376.499742][ T31] create_new_namespaces+0x3f3/0x720 [ 1376.505166][ T31] ? security_capable+0x7e/0x2e0 [ 1376.510163][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 1376.516169][ T31] ksys_unshare+0x4c8/0x8c0 [ 1376.520732][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 1376.525938][ T31] __x64_sys_unshare+0x38/0x50 [ 1376.530759][ T31] do_syscall_64+0xfa/0xfa0 [ 1376.535455][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1376.540693][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.546895][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1376.551618][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.558065][ T31] RIP: 0033:0x7faf3658f749 [ 1376.562551][ T31] RSP: 002b:00007faf373a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1376.571117][ T31] RAX: ffffffffffffffda RBX: 00007faf367e5fa0 RCX: 00007faf3658f749 [ 1376.579275][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 1376.587342][ T31] RBP: 00007faf36613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1376.597918][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1376.608644][ T31] R13: 00007faf367e6038 R14: 00007faf367e5fa0 R15: 00007ffd3a689f28 [ 1376.616934][ T31] [ 1376.620020][ T31] INFO: task syz.3.19574:17905 blocked for more than 144 seconds. [ 1376.650190][ T31] Not tainted syzkaller #0 [ 1376.655433][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1376.664327][ T31] task:syz.3.19574 state:D stack:22560 pid:17905 tgid:17902 ppid:5920 task_flags:0x400140 flags:0x00080003 [ 1376.677466][ T31] Call Trace: [ 1376.680797][ T31] [ 1376.683770][ T31] __schedule+0x1798/0x4cc0 [ 1376.691997][ T31] ? __lock_acquire+0xab9/0xd20 [ 1376.697272][ T31] ? __pfx___schedule+0x10/0x10 [ 1376.702383][ T31] ? schedule+0x91/0x360 [ 1376.706844][ T31] schedule+0x165/0x360 [ 1376.711027][ T31] schedule_timeout+0x9a/0x270 [ 1376.715987][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1376.721415][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1376.726942][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1376.732275][ T31] ? wait_for_completion+0x267/0x5d0 [ 1376.737890][ T31] wait_for_completion+0x2bf/0x5d0 [ 1376.743067][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1376.748934][ T31] ? remove_client_context+0x19c/0x1e0 [ 1376.754794][ T31] disable_device+0x1c6/0x320 [ 1376.759539][ T31] ? __pfx_disable_device+0x10/0x10 [ 1376.765413][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 1376.770851][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 1376.777024][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 1376.782802][ T31] nldev_dellink+0x2d1/0x320 [ 1376.787826][ T31] ? __lock_acquire+0xab9/0xd20 [ 1376.792735][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 1376.798147][ T31] ? apparmor_capable+0x137/0x1b0 [ 1376.803208][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1376.808096][ T31] ? security_capable+0x7e/0x2e0 [ 1376.813075][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 1376.818441][ T31] rdma_nl_rcv+0x6ae/0x980 [ 1376.822909][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 1376.828012][ T31] ? __lock_acquire+0xab9/0xd20 [ 1376.832926][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1376.839456][ T31] netlink_unicast+0x82f/0x9e0 [ 1376.844488][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1376.849821][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1376.855028][ T31] ? skb_put+0x11b/0x210 [ 1376.859342][ T31] netlink_sendmsg+0x805/0xb30 [ 1376.864225][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1376.869532][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1376.874911][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1376.880239][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1376.885852][ T31] __sock_sendmsg+0x21c/0x270 [ 1376.890581][ T31] ____sys_sendmsg+0x505/0x830 [ 1376.895539][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1376.900859][ T31] ? import_iovec+0x74/0xa0 [ 1376.905635][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 1376.910372][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1376.915739][ T31] ? __fget_files+0x2a/0x420 [ 1376.920339][ T31] ? __fget_files+0x3a0/0x420 [ 1376.925293][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 1376.930261][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1376.935894][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 1376.941211][ T31] ? do_syscall_64+0xbe/0xfa0 [ 1376.946251][ T31] do_syscall_64+0xfa/0xfa0 [ 1376.950792][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1376.956185][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.962296][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1376.967497][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.973434][ T31] RIP: 0033:0x7f6c38f8f749 [ 1376.978109][ T31] RSP: 002b:00007f6c371d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1376.986651][ T31] RAX: ffffffffffffffda RBX: 00007f6c391e6090 RCX: 00007f6c38f8f749 [ 1376.999761][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 1377.008946][ T31] RBP: 00007f6c39013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1377.017388][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1377.025554][ T31] R13: 00007f6c391e6128 R14: 00007f6c391e6090 R15: 00007fffb6af5ff8 [ 1377.033611][ T31] [ 1377.036909][ T31] INFO: task syz.1.19664:18200 blocked for more than 145 seconds. [ 1377.053646][ T31] Not tainted syzkaller #0 [ 1377.059082][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1377.067992][ T31] task:syz.1.19664 state:D stack:24808 pid:18200 tgid:18199 ppid:5916 task_flags:0x400140 flags:0x00080003 [ 1377.080830][ T31] Call Trace: [ 1377.084329][ T31] [ 1377.087656][ T31] __schedule+0x1798/0x4cc0 [ 1377.092223][ T31] ? __lock_acquire+0xab9/0xd20 [ 1377.097377][ T31] ? __lock_acquire+0xab9/0xd20 [ 1377.102276][ T31] ? __pfx___schedule+0x10/0x10 [ 1377.107732][ T31] ? schedule+0x91/0x360 [ 1377.112036][ T31] schedule+0x165/0x360 [ 1377.119403][ T31] schedule_preempt_disabled+0x13/0x30 [ 1377.125195][ T31] __mutex_lock+0x7e6/0x1350 [ 1377.129863][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1377.134945][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 1377.140467][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1377.145813][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1377.151523][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1377.158897][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1377.164365][T14103] Bluetooth: hci23: command tx timeout [ 1377.169925][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1377.175044][ T31] rdma_dev_change_netns+0x39/0x300 [ 1377.180300][ T31] rdma_dev_exit_net+0x203/0x340 [ 1377.185560][ T31] ? __pfx___might_resched+0x10/0x10 [ 1377.190902][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 1377.196710][ T31] ? net_generic+0x1e/0x240 [ 1377.201296][ T31] ? mutex_is_locked+0x17/0x50 [ 1377.206345][ T31] ? rtnl_is_locked+0x15/0x20 [ 1377.211084][ T31] ops_undo_list+0x49a/0x990 [ 1377.216039][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1377.221318][ T31] ? ops_init+0x469/0x5c0 [ 1377.226001][ T31] setup_net+0x2d6/0x320 [ 1377.230295][ T31] ? __pfx_setup_net+0x10/0x10 [ 1377.265050][ T31] ? copy_net_ns+0x337/0x4e0 [ 1377.269723][ T31] ? down_read_killable+0x1d1/0x350 [ 1377.275532][ T31] ? preinit_net+0x47d/0x780 [ 1377.280181][ T31] copy_net_ns+0x34e/0x4e0 [ 1377.284949][ T31] create_new_namespaces+0x3f3/0x720 [ 1377.290288][ T31] ? security_capable+0x7e/0x2e0 [ 1377.295526][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 1377.301304][ T31] ksys_unshare+0x4c8/0x8c0 [ 1377.305975][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 1377.311070][ T31] __x64_sys_unshare+0x38/0x50 [ 1377.317649][ T31] do_syscall_64+0xfa/0xfa0 [ 1377.322385][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1377.327867][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.334284][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1377.339031][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.345106][ T31] RIP: 0033:0x7f773298f749 [ 1377.349563][ T31] RSP: 002b:00007f7733745038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1377.358286][ T31] RAX: ffffffffffffffda RBX: 00007f7732be5fa0 RCX: 00007f773298f749 [ 1377.366635][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 1377.374914][ T31] RBP: 00007f7732a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1377.382933][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1377.391085][ T31] R13: 00007f7732be6038 R14: 00007f7732be5fa0 R15: 00007ffddbe6ec38 [ 1377.399789][ T31] [ 1377.403098][ T31] [ 1377.403098][ T31] Showing all locks held in the system: [ 1377.411134][ T31] 3 locks held by kworker/u8:0/12: [ 1377.416503][ T31] 1 lock held by khungtaskd/31: [ 1377.421538][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1377.434972][ T31] 3 locks held by kworker/1:2/917: [ 1377.440155][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1377.451407][ T31] #1: ffffc90003557ba0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1377.462057][ T31] #2: ffffffff8df43178 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1377.473258][ T31] 2 locks held by getty/5587: [ 1377.478433][ T31] #0: ffff88803377d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1377.488570][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1377.498992][ T31] 3 locks held by kworker/u8:3/29187: [ 1377.504470][ T31] #0: ffff88814cc9e948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1377.516407][ T31] #1: ffffc9000e447ba0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1377.529489][ T31] #2: ffffffff8f2cc6c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 1377.539295][ T31] 3 locks held by kworker/u9:1/1711: [ 1377.544704][ T31] #0: ffff8880891ab948 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1377.556115][ T31] #1: ffffc9001d0c7ba0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1377.569004][ T31] #2: ffff88804f164dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1377.579227][ T31] 3 locks held by kworker/u8:7/3722: [ 1377.584826][ T31] #0: ffff88801a069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1377.597194][ T31] #1: ffffc90011f6fba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1377.608430][ T31] #2: ffffffff8f2cc6c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1377.617826][ T31] 4 locks held by kworker/u8:9/10999: [ 1377.623236][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1377.637645][ T31] #1: ffffc9000ad97ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1377.651218][ T31] #2: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 1377.660887][ T31] #3: ffff88807c9a0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1377.672318][ T31] 4 locks held by kworker/1:7/11848: [ 1377.681004][ T31] 2 locks held by syz.2.19566/17878: [ 1377.687555][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1377.697403][ T31] #1: ffff88807c9a0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1377.708823][ T31] 2 locks held by syz.3.19574/17905: [ 1377.716163][ T31] #0: ffffffff99b6b958 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 1377.744029][ T31] #1: ffff88807c9a0700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 1377.756937][ T31] 2 locks held by syz.1.19664/18200: [ 1377.762285][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1377.772057][ T31] #1: ffff88807c9a0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1377.783651][ T31] 2 locks held by syz.0.19678/18289: [ 1377.790234][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1377.800286][ T31] #1: ffff88807c9a0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1377.811871][ T31] 2 locks held by syz.6.19699/18371: [ 1377.817353][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1377.827079][ T31] #1: ffff88807c9a0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1377.838404][ T31] 2 locks held by syz.4.19758/18606: [ 1377.843715][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1377.853331][ T31] #1: ffff88807c9a0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1377.864957][ T31] 2 locks held by syz.5.19779/18690: [ 1377.870280][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1377.883222][ T31] #1: ffff88807c9a0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1377.895188][ T31] 2 locks held by syz.9.19840/18967: [ 1377.900513][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1377.910022][ T31] #1: ffff88807c9a0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1377.921589][ T31] 2 locks held by syz.7.19841/18970: [ 1377.926957][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1377.936520][ T31] #1: ffff88807c9a0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1377.947815][ T31] 2 locks held by syz.8.19891/19166: [ 1377.953101][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1377.962784][ T31] #1: ffff88807c9a0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1377.974292][ T31] 2 locks held by syz.2.19938/19348: [ 1377.979609][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1377.990274][ T31] #1: ffff88807c9a0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1378.001763][ T31] 2 locks held by syz.0.19980/19501: [ 1378.007209][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1378.016813][ T31] #1: ffff88807c9a0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1378.028374][ T31] 2 locks held by syz.6.20024/19663: [ 1378.033758][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1378.046273][ T31] #1: ffff88807c9a0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1378.057749][ T31] 2 locks held by syz.3.20061/19811: [ 1378.063101][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1378.072722][ T31] #1: ffff88807c9a0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1378.084248][ T31] 2 locks held by syz.3.20061/19814: [ 1378.089580][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1378.099245][ T31] #1: ffff88807c9a0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1378.110695][ T31] 2 locks held by syz.4.20077/19872: [ 1378.116522][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1378.126117][ T31] #1: ffff88807c9a0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1378.137650][ T31] 2 locks held by syz.1.20098/19978: [ 1378.142991][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1378.152734][ T31] #1: ffff88807c9a0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1378.164322][ T31] 2 locks held by syz.7.20129/20090: [ 1378.169637][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1378.179302][ T31] #1: ffff88807c9a0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1378.190736][ T31] 2 locks held by syz.5.20140/20165: [ 1378.196525][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1378.206216][ T31] #1: ffff88807c9a0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1378.217560][ T31] 2 locks held by syz.9.20158/20254: [ 1378.222845][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1378.232405][ T31] #1: ffff88807c9a0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1378.243764][ T31] 2 locks held by syz.2.20184/20375: [ 1378.249245][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1378.258919][ T31] #1: ffff88807c9a0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1378.270305][ T31] 1 lock held by syz-executor/20481: [ 1378.275704][ T31] #0: ffffffff8f2cc6c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 1378.284950][ T31] 3 locks held by syz.8.20233/20569: [ 1378.290255][ T31] #0: ffff888150378dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1378.300368][ T31] #1: ffff8881503780b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1378.310218][ T31] #2: ffffffff8f436808 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1378.320314][ T31] 1 lock held by syz.6.20236/20583: [ 1378.325678][ T31] #0: ffffffff8f2cc6c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x346/0x700 [ 1378.334821][ T31] 5 locks held by syz.6.20236/20584: [ 1378.340149][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1378.349701][ T31] #1: ffffffff8f038410 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 1378.360047][ T31] #2: ffffffff8f0385d0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 1378.372829][ T31] #3: ffff88802f99cf98 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xee/0x5c0 [ 1378.384094][ T31] #4: ffffffff8f2cc6c8 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x151/0x7b0 [ 1378.393474][ T31] 4 locks held by syz.0.20237/20586: [ 1378.398900][ T31] #0: ffff88808408cdc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1378.408984][ T31] #1: ffff88808408c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1378.418999][ T31] #2: ffffffff8f436808 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1378.429317][ T31] #3: ffff88808789b338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 1378.439019][ T31] [ 1378.441393][ T31] ============================================= [ 1378.441393][ T31] [ 1378.449978][ T31] NMI backtrace for cpu 0 [ 1378.450001][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1378.450031][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1378.450044][ T31] Call Trace: [ 1378.450055][ T31] [ 1378.450065][ T31] dump_stack_lvl+0x189/0x250 [ 1378.450102][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1378.450131][ T31] ? __pfx__printk+0x10/0x10 [ 1378.450167][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1378.450199][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1378.450230][ T31] ? __pfx__printk+0x10/0x10 [ 1378.450256][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1378.450305][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1378.450338][ T31] watchdog+0xf60/0xfa0 [ 1378.450364][ T31] ? watchdog+0x1e2/0xfa0 [ 1378.450392][ T31] kthread+0x711/0x8a0 [ 1378.450423][ T31] ? __pfx_watchdog+0x10/0x10 [ 1378.450443][ T31] ? __pfx_kthread+0x10/0x10 [ 1378.450472][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1378.450503][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1378.450522][ T31] ? __pfx_kthread+0x10/0x10 [ 1378.450551][ T31] ret_from_fork+0x4bc/0x870 [ 1378.450576][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1378.450605][ T31] ? __switch_to_asm+0x39/0x70 [ 1378.450622][ T31] ? __switch_to_asm+0x33/0x70 [ 1378.450637][ T31] ? __pfx_kthread+0x10/0x10 [ 1378.450666][ T31] ret_from_fork_asm+0x1a/0x30 [ 1378.450702][ T31] [ 1378.450710][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1378.603636][ C1] NMI backtrace for cpu 1 [ 1378.603668][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1378.603689][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1378.603702][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1378.603728][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 f1 20 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1378.603745][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 1378.603763][ C1] RAX: c664b3f85ccb3300 RBX: ffffffff81967b47 RCX: c664b3f85ccb3300 [ 1378.603778][ C1] RDX: 0000000000000001 RSI: ffffffff8d7113f9 RDI: ffffffff8bbf08e0 [ 1378.603792][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 1378.603806][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7d0470 [ 1378.603821][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003952b58 [ 1378.603834][ C1] FS: 0000000000000000(0000) GS:ffff888126235000(0000) knlGS:0000000000000000 [ 1378.603850][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1378.603863][ C1] CR2: 000055ca32c49f40 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 1378.603881][ C1] Call Trace: [ 1378.603890][ C1] [ 1378.603897][ C1] default_idle+0x13/0x20 [ 1378.603921][ C1] default_idle_call+0x73/0xb0 [ 1378.603953][ C1] do_idle+0x1e7/0x510 [ 1378.603975][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1378.603998][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1378.604028][ C1] ? __pfx_do_idle+0x10/0x10 [ 1378.604058][ C1] ? do_idle+0xc/0x510 [ 1378.604082][ C1] cpu_startup_entry+0x44/0x60 [ 1378.604104][ C1] start_secondary+0x101/0x110 [ 1378.604133][ C1] common_startup_64+0x13e/0x147 [ 1378.604171][ C1] [ 1378.907382][T20584] lo speed is unknown, defaulting to 1000 [ 1378.980719][T20584] lo speed is unknown, defaulting to 1000 [ 1379.314366][T14103] Bluetooth: hci9: command 0x0406 tx timeout